Security and compliance at Netgain
Netgain Solutions, Inc. (netgain.tech) builds accounting software that runs inside Oracle NetSuite, covering lease accounting, fixed asset accounting, financial close management, bank reconciliations, and loan management. Netgain also builds cloud-based accounting solutions that operate as standalone software and that can integrate into any ERP, covering lease accounting and fixed asset accounting. Netgain security and compliance is backed by independent System & Organization Controls (SOC) audits. Netgain holds SOC 1 Type 2 and SOC 2 Type 2 reports covering both its cloud-based accounting software and NetSuite-native accounting software. Customers and prospects can request the reports as described below.
Compliance and audit reports
Netgain's controls are examined by an independent auditor, Linford & Company, LLP. SOC reports are attestations, not certifications: the auditor tests whether Netgain's controls operated effectively over the report period and reports the results.
SOC 1 Type 2 report
A SOC 1 Type 2 report is an independent examination of controls relevant to customers' financial reporting, tested over a period of time. Linford & Company, LLP issues Netgain's SOC 1 Type 2 reports. The report for Netgain’s NetSuite-native accounting software is issued twice a year; the most recent covers the period from Oct. 1, 2025 to March 31, 2026. A separate report for Netgain’s cloud-based software and NetSuite integrations software is issued annually.
SOC 2 Type 2 report
A SOC 2 Type 2 report is an independent examination of controls related to the Trust Services Criteria (TSC). Netgain's SOC 2 Type 2 report, issued annually by Linford & Company, LLP, covers the security, availability and confidentiality criteria. The most recent report covers Oct. 1, 2024 to Sept. 30, 2025 and includes Netgain's cloud-based accounting software, NetSuite-native accounting software, and NetSuite integration software.
How to request our reports
Netgain shares its SOC reports on request. You'll receive the most recent SOC 1 Type 2 and SOC 2 Type 2 reports for your products, plus a bridge letter covering the time since the last report period ended. Typical turnaround is two to three business days.
Current customers
Current customers can request reports by reaching out to their dedicated account manager or by contacting Netgain support. Tell us which Netgain products you use and whether you need a bridge letter dated to your fiscal year end. Netgain can issue an updated bridge letter on request.
Prospects
Prospects can request reports through our contact us page or from their Netgain account executive.
What the reports cover and where your data lives
Netgain’s SOC reports cover its cloud-based accounting software for companies and for firms (lease accounting and fixed asset accounting), NetSuite-native accounting software (NetLease, NetAsset, NetClose, NetCash, NetLessor, NetLoan for Borrowers, NetLoan for Lenders, Cross-Validation Rules, and Shared Transactions), and NetSuite integration software (Netgain Integrations, PunchOut, Netgain Files, and Approvals).
NetSuite-native software consists of SuiteApps that run within your Oracle NetSuite account, so NetSuite SuiteApp security operates in two layers. Netgain’s reports cover how we develop, test, release, and support our applications. Oracle’s NetSuite reports cover the platform’s hosting and infrastructure but exclude third-party add-on modules, including partner-built SuiteApps. NetSuite customers can request Oracle’s reports through their NetSuite account.
How we protect customer data
Independent audits. Netgain's security program is structured around the AICPA Trust Services Criteria and examined in annual SOC 1 Type 2 and SOC 2 Type 2 audits.
Security testing. Netgain scans its code and open-source dependencies for vulnerabilities and runs dynamic security testing on its applications.
Change management. Every change follows a documented development, testing and release process, validated in Netgain's SOC audits.
NetSuite review. Netgain's NetSuite-native solutions go through Oracle NetSuite's SuiteApp review.
Incident response. Netgain maintains an audited incident response program with defined steps for communicating with customers, backed by a business continuity plan.
Read our Privacy policy for how Netgain handles personal data.
Contact our security team
Do you have questions about Netgain’s security and compliance policy, or need to report a vulnerability? Email us at info@netgain.io or reach us through our contact us page, and include the product affected and a description of the issue.
Frequently asked questions
Is Netgain SOC 1 compliant?
Yes, Netgain holds SOC 1 Type 2 reports issued by Linford & Company, LLP. The report for NetSuite-native software is issued twice a year; the most recent covers Oct. 1, 2025 to March 31, 2026. A separate annual report covers Netgain’s cloud-based accounting software. SOC reports are attestations, not certifications: an independent auditor tests Netgain's controls relevant to your financial reporting.
Is Netgain SOC 2 compliant?
Yes, Netgain holds a SOC 2 Type 2 report, issued annually by Linford & Company, LLP. It covers the security, availability and confidentiality Trust Services Criteria. The most recent report covers Oct. 1, 2024 to Sept. 30, 2025 and includes Netgain's cloud-based accounting software and NetSuite-native solutions.
How do I request Netgain's SOC reports?
To request Netgain's SOC reports, current customers can contact Netgain support or their account manager, and prospects can use our contact us page. Netgain can also issue a bridge letter covering the time since the last report period ended. See how to request our reports above.
Which Netgain products do the SOC reports cover?
Netgain's SOC reports cover its cloud-based accounting software (lease accounting and fixed asset accounting solutions), NetSuite-native software (NetLease, NetAsset, NetClose, NetCash, NetLessor, NetLoan for Borrowers, NetLoan for Lenders, Cross-Validation Rules, and Shared Transactions), and NetSuite integration solutions. Oracle NetSuite's own reports cover the NetSuite platform and exclude partner-built SuiteApps, so auditors typically review both.
Who do I contact about a security concern?
To report a security concern, email Netgain at info@netgain.io or use our Contact us page. Include the product affected, a description of the issue and steps to reproduce it if you can.