TrustNet

BACKGROUND

Please describe your company and position.

I am the Marketing & Operations Digital Solutions Architect of LabLynx

Describe what your company does in a single sentence.

LabLynx provides cloud-based laboratory informatics software, including LIMS, ELN, LIS, and SDMS, to laboratories across environmental, clinical, research, and manufacturing sectors.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire TrustNet to accomplish?

• Obtain independent third-party validation of our platform's security and compliance posture
• Produce the documentation and reporting needed to answer security questionnaires from prospects, procurement teams, and enterprise clients
• Identify and close gaps in our controls before clients or auditors encountered them
• Strengthen our credibility in a market where laboratories handle sensitive and regulated data

SOLUTION

How did you find TrustNet?

Online Search

Why did you select TrustNet over others?

• High ratings
• Pricing fit our budget
• Great culture fit

How many teammates from TrustNet were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

LabLynx provides its LIMS to a U.S. state government agency whose information security standard, grounded in the NIST Cybersecurity Framework and NIST SP 800-53, requires vendors holding state data to undergo an independent third-party security examination annually. TrustNet has been our independent service auditor for that deployment since 2021. The scope covers the LIMS application, management's review of controls for its cloud hosting environment, and the organizational security controls behind the system, including policies, training, incident response, and vulnerability management. TrustNet runs the engagement in five phases: planning and scoping, documentation review, technical testing, interviews and walkthroughs with our security and operations staff, and formal reporting. Key deliverables: - An independent examination report delivered on schedule each year, satisfying the state's annual requirement - Assessment of the LIMS application and hosting environment against applicable NIST-aligned controls - Evaluation of our broader organizational control environment - Findings that inform how we strengthen our controls year over year Because TrustNet performs no management or non-attest services for us, the examination meets the independence requirement the standard is designed to enforce.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

- Five consecutive years of examinations completed since 2021, each delivered on schedule with no missed deadlines - Continued eligibility to operate the state agency deployment, which depends on satisfying the annual independent examination requirement - Full scope coverage each cycle, spanning the LIMS application, its hosting environment controls, and our organizational control environment - Faster, better-supported responses to client and prospect security questionnaires, since we can point to an independent examination rather than self-attestation - Year-over-year improvement to our control environment driven by findings from each cycle

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management has been consistently strong. TrustNet plans each annual cycle in advance, communicates what they need from us and when, and works through the engagement in clearly defined phases so there are no surprises about where things stand. Deliverables have arrived on schedule every year since 2021, which matters because the state's requirement is time-bound and a late report is not an option. Their responsiveness has been excellent throughout. Questions get clear answers, and when something requires additional internal review on their side, they take the time to get it right and keep us informed while it is in progress. Coordination around interviews and walkthroughs with our security and operations staff has always been straightforward and well organized. Working with their team is easy, and they treat the relationship as a long-term partnership rather than a transaction.

What was your primary form of communication with TrustNet?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The consistency. Five years into the relationship, the quality has not drifted and the schedule has not slipped once. Plenty of vendors are impressive during the first engagement and coast afterward. TrustNet has treated every annual cycle with the same rigor as the first, and their team now knows our environment well enough that each examination runs more efficiently without being any less thorough. That reliability is the thing we value most. The state's requirement is time-bound, so we need an auditor who delivers on schedule every year without being chased. TrustNet has never given us a reason to worry about it.

Are there any areas for improvement or something TrustNet could have done differently?

Nothing meaningful. The engagement has run smoothly for five years, the communication has been clear, and they have consistently delivered what we needed on the timeline we needed it. I would not change anything about how they work.

BACKGROUND

Please describe your company and position.

I am the GRC Lead of CapTech Ventures, Inc.

Describe what your company does in a single sentence.

CapTech is a technology consulting firm focused on defining and delivering what's next for organizations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire TrustNet to accomplish?

• SOC 2 Type II audit and independent validation of security controls

SOLUTION

How did you find TrustNet?

Online Search

Why did you select TrustNet over others?

Good value for cost

How many teammates from TrustNet were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

TrustNet provided end-to-end SOC 2 Type II audit services, including audit planning, control evaluation, and independent validation of our security program. Deliverables included the finalized SOC 2 Type II audit report.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Completion of SOC 2 Type II audits with clear, predictable timelines and delivery of audit reports used to support customer due diligence and sales processes.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

TrustNet demonstrated strong project management with clearly defined timelines and on-time delivery of all audit materials. Their team was responsive and readily available to answer questions and provide clarification as needed.

What was your primary form of communication with TrustNet?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about TrustNet was their flexibility and professionalism as an audit partner. Their team was consistently responsive and readily available, even on short notice, which made it easy to address questions and stay aligned throughout the audit. They delivered high-quality work while remaining practical and adaptable to our timelines and needs, making the overall process efficient and well managed.

Are there any areas for improvement or something TrustNet could have done differently?

We did not identify any significant areas for improvement. The engagement was well managed, and expectations were consistently met throughout the audit process.