ECA has completed its Service Organisation Control 2 (SOC2) Type 2 examination by independent auditor, KirkpatrickPrice. This significant achievement affirms ECA’s ongoing commitment to the highest standards of security, compliance, and risk management.
The successful completion of the Type 2 audit positions ECA as one of the few organisations in its sector to meet this demanding, year-long benchmark, providing clients with independent assurance that their sensitive data is protected with industry-leading controls.
The comprehensive audit covered the period from 1st October 2024 to 30th September 2025. It evaluated not only the design but, crucially, the sustained operational effectiveness of ECA’s controls related to the Trust Services Criteria (TSC) of Security and Privacy.
Mark Ash, CEO of ECA International, commented: “This Type 2 report is a direct reflection of ECA’s dedication to our customers and our operational excellence. By validating our security posture over a full year, we tangibly build customer trust. It shows the market that ECA is fully committed to mitigating risk and upholding global compliance standards across all our systems."
The SOC 2 Type 2 report is particularly valuable for ECA’s customers, especially those in highly regulated industries where security reviews often delay procurement. The independent validation provides immediate, documented proof of internal controls, which significantly streamlines the due diligence process and eliminates the need for time-consuming ad-hoc security questionnaires.
“The SOC 2 audit is based on the Trust Services Criteria,” said Joseph Kirkpatrick, President of KirkpatrickPrice. “ECA International delivers trust-based services to their clients, and by communicating the results of this audit, their clients can be assured of their reliance on ECA International's controls.”
Brian Curtin, Head of Security at ECA International, added: "In an era of increasing regulatory compliance and data breaches, the SOC 2 report shows our customers the depth of our commitment to data security. It provides the official documentation needed to validate that we manage access, monitor systems, and handle incidents the right way, streamlining compliance processes for our partners, such as those in the banking sector.”
ENDS
For more information please contact Izzy Jenkins at The Think Tank at izzyj@thinktank.org.uk or call +44 (0) 20 4592 8789
Notes to Editors
About ECA
ECA helps organisations manage cross-border workforces with confidence. Our integrated platform and advisory services cover the full spectrum of global mobility—from long-term assignments and international remote work to business travel compliance and cost benchmarking.
With over 50 years of experience and a customer base spanning 300+ locations worldwide, we support the mobility programmes of companies headquartered in more than 70 countries, managing over one million employees across borders.
Our proprietary data underpins key decisions, from pay and benefits to compliance risk and policy design. This includes cost-of-living and housing benchmarks in over 500 locations, and survey insights drawn from global employers across all industries.
ECA’s platform brings together tax, immigration, assignment tracking, and travel compliance into a single, streamlined experience for HR, mobility and reward teams. Tracker Software Technologies became part of ECA in 2024. Global Expat Pay, supported by ECA since 2022, continues to operate independently while benefitting from shared insight and infrastructure.