The certification, conducted by Johanson Group LLP, confirms that Berry Street meets rigorous criteria for security, availability, and confidentiality. The evaluation covered operations through June 2026 and concluded with no exceptions noted, ensuring that highly sensitive patient data—ranging from lab values to behavioral health details—remains protected under a continuously audited framework.

Noah Kotlove, co-founder and CEO of Berry Street, emphasized that the certification serves as tangible proof of the platform's reliability for its institutional partners. Because nutrition therapy requires patients to share intimate health information, the company views this independent assessment as a necessary step to maintain the integrity of its clinical interventions. The SOC 2 Type II status integrates into an existing compliance architecture that already includes HIPAA protocols, annual penetration testing, and ongoing security monitoring.