Aderant Achieves SOC 2 Type 2 for Onyx

Key Takeaways

• Aderant's Onyx passed SOC 2 Type 2 audit.
• Audit covered security, availability, confidentiality controls.
• Review period: Nov 1 2025 – Jan 31 2026.
• Independent CPA firm Schellman performed the examination.
• Boosts law firms' confidence in Onyx reliability.

Pulse Analysis

SOC 2 Type 2 audits have become a benchmark for cloud‑based service providers, especially those handling sensitive legal data. The Trust Services Criteria—security, availability, and confidentiality—are scrutinized over an extended period, ensuring that controls are not only well‑designed but also consistently effective. For legal technology firms, this level of validation signals compliance with stringent data‑privacy regulations such as the ABA Model Rules and emerging state privacy statutes, helping clients mitigate exposure to breaches and operational downtime.

Aderant’s recent SOC 2 Type 2 achievement for Onyx builds on a broader security agenda that already includes SOC 2 certifications for Sierra Expert, vi, and iTimeKeep. By engaging Schellman & Company, a respected independent CPA firm, Aderant subjected its control framework to a thorough third‑party review. The audit examined everything from access management and encryption practices to incident‑response procedures, confirming that Onyx’s infrastructure can reliably support law firms’ demanding workloads. This systematic approach not only satisfies current client expectations but also positions Aderant to streamline future audits across its product suite.

For law firms, the certification translates into tangible business value. Clients increasingly demand proof that their technology partners can safeguard privileged information, and a SOC 2 Type 2 seal offers an objective, industry‑wide credential. It also differentiates Aderant in a crowded legal‑tech market, where security assurances can be a decisive factor in procurement decisions. As the sector moves toward greater digitization and remote collaboration, firms that demonstrate robust, auditable controls are likely to win more engagements and command premium pricing, reinforcing the strategic importance of continuous security investments.