Orijin Achieves SOC 2 Type 2 Certification, Reinforcing Its Commitment to Security and Compliance in Correctional Facilities
- Heather Harman
- May 19, 2025
- 2 min read
NEW YORK, NY – May 20, 2025 – Orijin, a public benefit corporation, and leading provider of secure learning technology for correctional facilities, has achieved the System and Organization Controls (SOC) 2 Type 2 certification—marking a critical milestone in its ongoing commitment to meet and exceed the highest security standards expected by correctional institutions and mandated by an increasing number of states.
The SOC 2 Type 2 certification, conducted by independent auditor Sensiba LLP, evaluates an organization’s operational effectiveness and internal controls over an extended period. Developed by the American Institute of Certified Public Accountants (AICPA), this rigorous audit confirms that Orijin adheres to three trust service criteria: security, availability, and confidentiality.
“For correctional leaders, security isn’t optional—it’s essential,” said Harris Ferrell, CEO of Orijin. “From day one, Orijin has designed its platform to protect the data of our learners, administrators, and staff. SOC 2 certification gives our partners the assurance that our infrastructure and policies meet their evolving compliance and security needs.”
The rigorous certification process included policy audits, infrastructure reviews, access control validation, and incident response and disaster recovery simulations. As part of the audit, Orijin’s code changes were reviewed for proper testing protocols, and systems were evaluated for key safeguards such as access controls, encryption practices, and secure offboarding procedures. With no exceptions identified, the audit affirmed that Orijin’s infrastructure and internal processes are operating with a high degree of integrity and effectiveness.
Doug Walton, Senior Network and Cloud Engineer, who led the initiative, emphasized that while Orijin has long operated with strong internal controls, SOC 2 certification provided a formal framework to prove it. “This wasn’t about catching up—it was about validating what we were already doing, and continuing to raise the bar,” he said. “Correctional facilities are increasingly requiring this level of compliance to protect both staff and incarcerated individuals, and we’re proud to meet those expectations.”
The certification not only ensures compliance with current state-level mandates but also positions Orijin to pursue additional security frameworks in the future.
About Orijin
Founded in 2014, Orijin breaks the cycle of incarceration by preparing every justice-impacted individual for a sustainable career. Orijin provides a robust, cloud-based learning and communications platform delivered on secure devices in hundreds of correctional facilities across the country. As a public benefit corporation and Certified B Corporation, Orijin does not charge incarcerated individuals nor their families for its solutions. For more information, visit www.orijin.works.v
Read the original press release here.