01 // TRUST, SECURITY & PERFORMANCE FOR EHS, ESG, AND WATER

Third-party verified. Publicly monitored.

02 // Trust But Verify

And the proof of our claims is published by third parties.

Buying committees need more than a vendor's word. Locus provides third-party audited financials, security, and operations alongside a decade-plus of publicly accessible, real-time uptime data. Most EHS software companies cannot say that.

Request our auditor's SOC report

What "independently verified" actually means

03 // drill down

Most vendors provide a SOC report limited to their hosting provider's infrastructure only

— not the software company itself. (Or they have no SOC audit at all!)

The EHS software market has a trust problem. Vendors with consolidated platforms, sprawling acquisition histories, and opaque audit records often claim security and stability without providing verifiable evidence. Buying committees asking "can we see your SOC report?" frequently receive a document covering only the hosting provider's data center — not the software company's own financials, operations, development practices, or security controls.

Locus Technologies provides SOC 1 Type 2 and SOC 2 Type 2 attestations covering our own financials, operations, development processes, and security.

Locus is different. The Locus SOC 1 Type 2 and SOC 2 Type 2 attestations cover Locus Technologies itself: its software development and management processes, its financial reporting controls, its internal security protocols, and its data protection practices — in addition to the data center hosting environment. These are the full-scope reports that matter when a buying committee needs to defend a vendor selection.

Request our auditor's SOC report

04 // Credentials

The SOC reports, explained

Locus holds two distinct SOC certifications and understanding what each covers helps explain why both matter for an EHS&S software purchasing decision.

Locus has completed these rigorous audits annually since 2012. The report is available upon request by contacting info@locustec.com. Both reports refer to Locus Technologies' software and operations — not simply those of the AWS infrastructure that hosts the platform.

The SOC 1 Type 2 report evaluates controls relevant to financial reporting. For organizations that rely on Locus for ESG financial disclosures, sustainability reporting that feeds board presentations, or environmental liability data that informs financial statements, this attestation provides assurance that Locus operates with appropriate controls over the accuracy and integrity of that financial-reporting chain.

The SOC 2 Type 2 report evaluates the operational effectiveness of controls across five Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy. Unlike a point-in-time review, a Type 2 examination evaluates whether controls are operating consistently over an extended period — for Locus, the audit covers a 12-month window each year, conducted by A-LIGN, a leading cybersecurity compliance assessor trusted by more than 4,000 organizations globally. The most recent audit was completed as of July 31, 2025, covering the period from July 1, 2024 to June 30, 2025.

05 // Availability

Uptime that has been published in real-time since 2009

There is a meaningful difference between a vendor who claims high uptime and a vendor who points you to a live, third-party monitoring page and says: “see for yourself”.

Locus is the only leading EHS software provider to publish real-time, third-party uptime monitoring data openly on its website. A continuous uptime feed has been publicly accessible via an independent monitoring service since 2009. Users, prospects, auditors, and buying committees can view current and historical availability statistics at any time, without requesting a report, contacting sales, or waiting for a quarterly update. Locus links directly to this monitoring page from its own website and has done so consistently — because the numbers are worth showing.

The result: 99.99%+ uptime since 2009. For EHS and ESG compliance programs where missed data submissions, delayed reports, or lost records carry real regulatory consequences, that number is not a point of pride, it is a qualification.

Real-time Uptime

SaaS for Better Environmental Stewerdship

Amazon Web Services: the infrastructure behind the platform

Locus hosts all applications on Amazon Web Services (AWS), which operates the world's most extensive and secure cloud infrastructure. AWS serves millions of customers in more than 190 countries, and its security, compliance, and reliability credentials are among the most extensively documented in the technology industry.

For Locus customers, that means the physical and logical infrastructure underlying the platform (i.e., data centers, network isolation, redundancy, encryption, and disaster recovery capabilities) is AWS-grade by default. Locus layers its own SOC-verified security controls, access management, and application-level protections on top of that foundation, providing a defense-in-depth posture that extends through the full stack.

The combination of AWS infrastructure and Locus's independently audited controls is what makes the platform appropriate for the most sensitive environmental datasets in the world — including those belonging to the customers described below.

07 // Customer Proof

Field-tested by the most demanding customers in the world

The most meaningful evidence of platform reliability is not a certification, it is a multi-year relationship with customers who have zero tolerance for downtime, data errors, or security gaps.

Los Alamos National Laboratory has trusted Locus software since 2011 to manage environmental chemistry data, automated data validation, NRC regulatory reporting, and a community-facing environmental data website at one of the most sensitive research facilities in the United States. The data environments at a nuclear research laboratory are among the most stringent anywhere, and Locus has served that customer continuously for more than 15 years.

9 // Customer Proof

Locus continually supports the most discerning customers

Locus also supports drinking water systems, public port authorities, US government agencies, chemical manufacturers, large pharmaceutical companies, and some of the largest oil and gas and manufacturing operations in the world. These are organizations where regulatory reporting errors carry serious legal, financial, and public health consequences. They have chosen Locus Technologies and, at a 98% annual renewal rate, they keep choosing it.

Explore how Locus serves government agencies and highly regulated industries on the Government Solutions and Industry Solutions pages.

Data you can stand behind

09 // Data validation as a trust signal

A SOC certification tells you the system is secure. A 99.99%+ uptime number tells you the system is available.

But in environmental compliance, a third question matters equally: can you trust what the system produces?
Locus Technologies' answer is embedded in the platform architecture. Every data pathway into Locus Platform (e.g. laboratory imports, field instrument feeds, mobile device entries, API connections, manual uploads) passes through automated validation before data is accepted and stored. Locus EIM validates data against expected ranges, detection limits, units, and laboratory reporting standards at the point of entry. Anomalies are flagged rather than silently stored, giving compliance teams the opportunity to resolve data quality issues before they propagate into reports.

This validation layer is not a reporting bolt-on. It is part of the core data model and has been since the platform's earliest versions. The result is that Locus customers submit reports with high confidence in the underlying data — a confidence that holds up under regulatory audit, third-party verification, and investor scrutiny for ESG disclosures alike.

Data Quality & Validation

10 // TRUST AT EVERY LAYER

// TRUST AT EVERY LAYER

Confidence built into every record, workflow, and report

For regulated organizations, trust must extend from the infrastructure beneath the platform to the data moving through it. Locus applies rigorous controls across the full information lifecycle, protecting records, sustaining access, and identifying quality issues before they reach critical reports. The result is a dependable system of record for decisions that may be examined by regulators, auditors, executives, and investors. These three pillars show how Locus turns platform integrity into evidence customers can act on.

Secure

Available

Accurate

EHS compliance manager working on computer

The relationship model that large vendors cannot replicate

Locus is a founder-led, independent company with no private equity ownership and no obligation to a shareholder-driven acquisition strategy. That independence has direct consequences for how customers experience the platform over time.

Customers who have weathered the consolidation of other EHS software vendors know what happens when a product they rely on is acquired: development priorities shift, pricing changes, support quality declines, and the team they trusted is often gone within 18 months. Locus has watched that cycle play out across the industry while maintaining its own course.

Because Locus is not managing post-acquisition integration work, its entire engineering and domain team is focused on the platform and the customers currently using it. Every Locus account has a dedicated implementation manager. Support staff are employed directly by Locus, based in the United States. When a customer contacts support, they reach someone who knows the platform and understands the compliance context — not a tiered help desk managed by a third-party call center.

That model is visible in the renewal data. Customers who find that other EHS vendors delivered less than promised regularly switch to Locus Technologies. Customers who choose Locus tend to stay, and they tend to expand their use of the platform over time as their trust in it deepens.

12 // Testimonials

Trusted by industry leaders

From government agencies to Fortune 500 companies, organizations trust Locus Technologies to run critical environmental and compliance operations.

National Research Laboratory

High-quality environmental data is one of the key drivers that will help us meet our cleanup goals. Moving forward, our data will help us be more sustainable and better stewards of the environment. Organizing these massive volumes of data, and making them available to the public, will help demonstrate our commitment to openness and environmental compliance. Organizing these massive volumes of data, and making them available to the public, will help demonstrate our commitment to openness and environmental compliance.

Alison Dorries Division leader for Waste and Environmental Services, Los Alamos National Laboratory

Consulting & Engineering Firm

Locus EIM’s audit trails and automatic timestamps give us precise visibility into turnaround times, bottlenecks, and laboratory performance. Instead of relying on intuition, we manage with real metrics – improving accountability and accelerating decision‑ready data delivery.

For data review and qualification in particular, the impact is measurable. By pairing a dedicated data‑management team with Locus EIM’s centralized platform, we’ve achieved an 85% gain in validation efficiency over non‑centralized systems and 30–40% improvement compared to common industry approaches. While many organizations wait weeks or months for qualified data, our team routinely delivers final reporting tables within a week of receiving lab results.

Christine Wallace Environmental Supervisor, US West Environment, AECOM

The Port of Seattle

Your team has been amazing! We are extremely pleased with their display of technical skill, competence, and efficiency throughout the process to date. Marian’s been a fantastic leader keeping us on track through an involved process with lots of rabbit holes and our own IT processes. Tricia Walters is one of the best facilitators and product leaders I’ve had the pleasure to meet. Knowledgeable, patient, and keen to anticipate customer needs around every corner. Both are also just amazingly nice and professional people too. The rest of Locus’ team…have also been super helpful SME’s when called on. I’m glad to say we made the right choice this far into the work. UAT is happening this week and testing coming soon. Thanks again for the partnership.

Jeremy Webb Sr. Environmental Program Manager, The Port of Seattle

Oil Field Services Company

Throughout my long career, I have worked with many vendors to enhance our EHS systems, but none have impressed me as much as Locus Technologies. Locus leveraged their software technologies to automate processes across all aspects of our EHS challenges—most notably in water management, traditionally one of the most complex segments of oil and gas exploration and groundwater management. Locus excelled in this area, and I could not have managed our program without them.

Tom Jones Director EHS Compliance and Remediation, Schlumberger

US Department of Energy Site

Overall Locus EIM is providing us with the ability to have a cloud-based data system that is compliant and functional with today's ever changing software technology. The transition to this system from our old one has improved the stability of the data and is making cross-training very easy for our team.

J. Matthew Barnett Environmental Radiation Task Lead, Pacific Northwest National Laboratory

Waste Collection Operator

With Locus’ out-of-the-box solution, we can configure the applications to align with our current workflow and tailor the functionality to our specific needs. The Locus Platform integration with the compliance content provider RegScan will help our Environmental Compliance team keep on top of all the regulations throughout California, Oregon, and Washington.

Amy Dietz Director of Environmental Compliance, Recology

Questions to ask any EHS software vendor about trust and security

The Locus EHS Buyer Intelligence Series includes specific guidance for evaluating vendor security and reliability claims during a purchasing process.

A few questions that every buying committee should ask:

Vendor or Hosting Provider

Does your SOC report cover your own software company and operations, or only your hosting provider's infrastructure?

Verified Uptime

Is your uptime data available from an independent third-party source — and can you share a link to it right now?

Continuous Performance

Are your SOC audits Type 2, covering an extended period of time, or Type 1, covering a single point in time?

Third-Party Audits

Who conducted your most recent audit, and when was it completed?

Data Integrity

What is your data validation model — how does the platform handle anomalous or out-of-range data at the point of entry?

Independence or PE-Influence

Is your company founder-led and independent, or PE-backed and operating under acquisition integration pressures?

Page // August 19, 2026 True Multitenancy in EHS Software

Page // August 20, 2026 Metadata-Driven EHS Software

Page // August 19, 2026 AI for EHS and ESG

Page // August 20, 2026 Configurable EHS&S Software

Page // August 20, 2026 Domain Expertise in EHS & ESG Software Learn More Locus Platform Overview

15 // Meet with Locus

Ready to see the evidence firsthand?

Request the Locus SOC 1 or SOC 2 report, check the live uptime feed, or schedule a demo with a team that has nothing to hide.

Book a demo