Amanah Tech earned its SOC 2 Type II attestation on the first attempt in four months, partnering with the AI-native compliance platform Akitra. For customers, SOC 2 compliant colocation at 151 Front Street West means the physical and environmental controls protecting your racks are independently tested over time, giving you audit-ready evidence instead of promises.
Case Study: Akitra Partnership, August 2026
In infrastructure, trust is not a feeling. It is a report someone else signed.
Why We Pursued SOC 2 Type II
We run colocation, dedicated servers, and connectivity for thousands of businesses across 40+ countries out of 151 Front Street West. Our customers already trusted the physical facility. What enterprise procurement teams increasingly wanted was something we could hand them: independent proof that our security controls work the way we say they do, observed over time, by an auditor with no stake in the answer.
What we set out to solve
- Answer procurement on day one. Enterprise buyers increasingly expect SOC 2 Type II from an infrastructure provider. We wanted that answered before it was asked.
- Independent validation of controls we already ran. Our access control, monitoring, and change management practices were mature. What we wanted was a third party testing them over time.
- A first-time process run properly. This was our first SOC 2 initiative, so we wanted partners who had run the process many times rather than a dashboard and a wish.
- Protect engineering bandwidth. Our engineers keep a 24/7 facility running. A compliance program that consumed them for a year was not an acceptable trade.
How We Ran It: Akitra Andromeda
- A structured path instead of a pile of controls. Akitra broke our first SOC 2 Type II implementation into a clear, sequenced process. At every stage we knew what evidence was required, who owned it, and what came next. Nobody on our team had to guess what “audit ready” meant.
- Direct access to compliance experts. We worked with Akitra’s leadership and compliance specialists directly, not a ticket queue. Questions got same-day answers. When something specific to a data centre environment came up, we had someone who understood it on the call.
- A platform our team picked up immediately. Andromeda centralized evidence collection, control mapping, and audit preparation in one place. There was effectively no learning curve, which meant our engineers spent their time producing evidence rather than learning software.
- Project management that kept the clock moving. Consistent check-ins and proactive follow-ups meant the project never quietly stalled between milestones. That discipline is the single biggest reason a first-time SOC 2 took four months instead of a year.
The results at a glance
| 4 months | From kickoff to SOC 2 Type II attestation, first attempt |
| Type II | Controls tested over time, not a point-in-time snapshot |
| Same day | Typical response time from Akitra throughout the engagement |
| 100% | Canadian data residency across the 151 Front Street West facility |
What Changed After the Report
- Enterprise conversations start further ahead. The compliance requirement is answered in the first exchange, so evaluations move to architecture faster.
- Security reviews move faster. Our team addresses compliance requirements up front with documentation rather than promises.
- Our controls are genuinely tighter. Preparing for an auditor who tests controls over months forces real operational discipline, not paperwork.
- The next certification is cheaper. With evidence collection and control ownership already established, our next certification is an extension of existing work rather than a restart.
“We evaluated multiple SOC 2 compliance providers, but Akitra clearly stood apart. They significantly reduced our time to certification, lowered the overall cost, and minimized the internal resources we needed to dedicate to the project.” – Nezar Freeny, CEO, Amanah Tech
Why This Matters for Your Colocation Compliance
When you colocate, your compliance posture inherits your provider’s. Auditors ask about the physical and environmental controls protecting your equipment, and the answer has to come from us. If we cannot evidence those controls, that becomes your finding, not ours.
Our SOC 2 Type II report means the controls around your racks at 151 Front have been independently tested over time. Combined with PIPEDA and PHIPA alignment, 100% Canadian data residency, N+1 redundancy across power, cooling, and network, and a 100% network uptime SLA, it gives you something you can hand to your own auditor instead of describing from memory.
That is what a compliance-ready colocation partner looks like.
The Akitra x Amanah Tech Customer Story
Akitra published a detailed case study on our SOC 2 Type II journey. Walk through the challenge, the implementation, and the outcomes, including how we compressed a first-time audit into roughly four months. Read the Akitra case study
Want to see the controls behind the report?
Book a tour of 151 Front Street West and see the physical and environmental controls behind our SOC 2 Type II report for yourself.
Questions about this topic
Amanah Tech reached SOC 2 Type II attestation in four months, on the first attempt, by pairing a mature in-house security program with Akitra’s compliance-automation platform. Consistent project management and same-day expert support kept the timeline from stalling, compressing what often takes a year.
A SOC 2 Type II report tests security controls over an observation period rather than at a single point in time. It is independent evidence that controls operate as described over months, which is what enterprise procurement teams increasingly ask for.
When you colocate, your compliance posture inherits your provider’s. Auditors ask about the physical and environmental controls protecting your equipment, and that evidence has to come from the provider. A SOC 2 Type II report gives you audit-ready proof instead of promises.
Yes. Amanah’s colocation at 151 Front Street West combines SOC 2 Type II with PIPEDA and PHIPA alignment, 100% Canadian data residency, N+1 redundancy across power, cooling, and network, and a 100% network uptime SLA.
It means the physical and environmental controls around your racks at 151 Front Street West have been independently tested over time. That gives you audit-ready evidence to hand to your own auditor instead of describing controls from memory.