The certification, conducted by Johanson Group LLP, confirms that Berry Street meets rigorous criteria for security, availability, and confidentiality. The evaluation covered operations through June 2026 and concluded with no exceptions noted, ensuring that highly sensitive patient data—ranging from lab values to behavioral health details—remains protected under a continuously audited framework.
In section Releases
Berry Street Secures SOC 2 Type II Certification for Nutrition Platform
As Berry Street scales its nutrition therapy platform across all 50 states, the company has secured SOC 2 Type II certification. This audit validates the effectiveness of its security controls over a three-month period, providing health plans and enterprise partners with independent verification of its data protection standards.

Noah Kotlove, co-founder and CEO of Berry Street, emphasized that the certification serves as tangible proof of the platform's reliability for its institutional partners. Because nutrition therapy requires patients to share intimate health information, the company views this independent assessment as a necessary step to maintain the integrity of its clinical interventions. The SOC 2 Type II status integrates into an existing compliance architecture that already includes HIPAA protocols, annual penetration testing, and ongoing security monitoring.
Comments (0)
No comments yet. Be the first!