This report details Read AI's system and its controls from April 1, 2023, to March 31, 2024, based on SOC 2 criteria for security, availability, processing integrity, and privacy. The report outlines the controls designed, implemented, and operated by Read AI to ensure its service commitments and system requirements are met, such as reliance on a cloud hosting subservice organization and the need for complementary subservice and user entity controls. While the report shares Read AI’s controls and assumptions about third-party user controls, it does not disclose the specific controls of the organization.