by Laura Formby / March 5th, 2025
March 5, 2025 – Fort Lauderdale, FL – BioTrack, a leading provider of seed-to-sale tracking and dispensary
point-of-sale software for the Cannabis industry, today announced that it has completed its SOC 1 Type II audit, SOC 2 Type II Privacy audit and HIPAA audit, performed by KirkpatrickPrice. These
attestations provide evidence that BioTrack has a strong commitment to security and to delivering
high-quality services to its clients by demonstrating that they have the necessary internal controls
and processes in place.
A SOC 2 audit provides an independent, third-party validation that a service organization’s
information security practices meet industry standards stipulated by the AICPA. During the audit, a
service organization’s non-financial reporting controls as they relate to security, availability,
processing integrity, confidentiality, and privacy of a system are tested. The SOC 2 report delivered
by KirkpatrickPrice verifies the suitability of the design and operating effectiveness of BioTracks’
controls to meet the standards for these criteria.
A SOC 1 audit also provides an independent, third-party validation that a service organization’s
information security practices meet industry standards stipulated by the AICPA, but it also includes
SSAE 18. During the audit, a service organization’s controls that are relevant to ICFR are tested and
their design and operating effectiveness verified.
The Health Insurance Portability and Accountability Act (HIPAA) sets a national standard for the
protection of consumers’ Protected Health Information (PHI) and electronic Protected Health
Information (ePHI) by mandating risk management best practices and physical, administrative, and
technical safeguards. HIPAA was established to provide greater transparency for individuals whose
information may be at risk, and the Department of Health and Human Services’ Office for Civil
Rights enforces compliance with the HIPAA Privacy, Security, and Breach Notification Rules.
The goal of the HIPAA Security Rule is to create security for ePHI by ensuring the confidentiality,
integrity, and availability of ePHI, protecting against threats, protecting against unpermitted
disclosures, and ensuring workforce compliance. The independent testing performed by
KirkpatrickPrice confirms the controls implemented to protect ePHI are properly designed and
implemented.
“Achieving these attestations underscores BioTrack’s unwavering commitment to safeguarding our
clients’ data and maintaining the highest standards of security and compliance. As the cannabis
industry evolves, we continue to prioritize robust internal controls to ensure the trust and
confidence of our partners and customers”
— Dr. Moe Afaneh, Chief Operating Officer of BioTrack
“Ensuring the highest levels of security and compliance for our clients is at the core of BioTrack’s
mission. This audit reaffirms our commitment to rigorous data protection, reinforcing state
regulators, operators, and businesses’ trust in our platform. We continuously evolve our security
measures to not only meet industry standards but to exceed them, providing a foundation of
reliability in an increasingly complex regulatory environment.”
— David Terrell, Chief Technology Officer of BioTrack
“BioTrack remains at the forefront of compliance and security, delivering best-in-class technology
that safeguards our clients’ data while enabling their success. Earning this certification underscores
our proactive risk management approach and relentless focus on providing secure, scalable, and
compliant solutions. As the cannabis industry grows, we will continue to set the benchmark for
security and operational excellence.”
— Zachary L. Venegas, CEO and Executive Chairman of BioTrack
“We determined from our reviews that BioTrack has good technical controls in place in accordance
with multiple industry-accepted standards,” said Joseph Kirkpatrick, President of KirkpatrickPrice.
“As a result, their clients can be assured of their reliance on BioTracks’ controls. We admire their
commitment to providing trusted services and dedication to upholding industry best practices.”
About BioTrack:
BioTrack is a pioneering provider of cannabis point-of-sale (POS) and seed-to-sale inventory
management software, delivering a comprehensive solution for cultivators, processors, and
retailers. As the industry’s first fully integrated seed-to-sale platform, BioTrack set the
standard for cannabis business management by offering robust tracking, compliance, and
operational tools in a single, unified system. Committed to transparency, legitimacy, and
accessibility, BioTrack empowers cannabis businesses with the intelligence and technology
needed to navigate regulatory requirements, optimize efficiency, and drive growth. With a
focus on security, reliability, and compliance, BioTrack continues to lead the way in cannabis
software innovation. For more information, visit www.biotrack.com
About KirkpatrickPrice:
KirkpatrickPrice is the leader in cyber security and compliance audit reports. Their experienced auditors know audits are hard, so they take complicated audits such as SOC 1, SOC 2, PCI DSS, HIPAA, HITRUST, GDPR, and ISO 27001 and make them worth it. The firm has issued over 20,000 reports to over 2,000 clients worldwide, giving its clients trusted results and the assurance they deserve. Using its Online Audit Manager, the world’s first compliance platform, KirkpatrickPrice partners its clients with an expert to guide them through the entire audit process, from audit readiness to final report. For more information, visit kirkpatrickprice.com, follow KirkpatrickPrice on LinkedIn, or subscribe to our YouTube channel.
About the Author
Laura Formby
