Files checked when they open.Accounts protected at sign-in.
meo is SOC 2 Type 2 certified. Each file’s fingerprint is checked again when you open it, each person can protect their account with a second factor or a passkey, and the activity log records who did what in your organization.
A fingerprint at upload. Checked again when opened.
Documents
- Bank statement.pdfSep 24
- Proof of identity.pdfSep 24
- Proof of address.pdfSep 24
- Service agreement.pdfSep 12
- Power of attorney.pdfSep 12
- Notice of assessment 2025.pdfSep 3
File details
Bank statement.pdf
Information
Integrity
The SHA-256 fingerprint was recorded at upload time. A fresh verification compares it against what is in storage right now.
Two factors, passkeys. Each person secures their account.
Two-factor authenticationEnabled
Authenticator app configured for verification
Passkeys
Sign in without a password using Face ID, Touch ID or a security key
Recognized devices
Browsers known to your account. A security alert is emailed to you when a sign-in happens from a new device.
Who did what, and when. Search for a person, export the log.
Activity log
Actions in Laval and across the organization
- Sep 26, 14:32Sophie Lavoiesophie.lavoie@example.comDocument downloadedBank statement.pdf
- Sep 26, 13:58Sophie Lavoiesophie.lavoie@example.comDocument viewedBank statement.pdf
- Sep 25, 16:48Sophie Lavoiesophie.lavoie@example.comDocument downloadedProof of identity.pdf
- Sep 25, 16:45Sophie Lavoiesophie.lavoie@example.comDocument viewedProof of identity.pdf
CSV export downloaded
SOC 2 Type 2 certified
Our security controls are audited by an independent external firm against the AICPA’s SOC 2 Type 2 standard.
In meo’s security
- Activity logFilter by period, type or operation. No user can change or delete an entry.
- New device alertA sign-in from an unknown device is emailed to you: browser, system, location, IP address.
- Google or MicrosoftSign in with your Google or Microsoft account, or without a password using a passkey.
- Active sessionsSee where your account is signed in and sign out the other sessions in one click.
Frequently asked questions
All questionsWhat is a SHA-256 fingerprint?
A 64-character string computed from the file’s exact content. The smallest change gives a different fingerprint: comparing the two tells you whether the file is unchanged since it was uploaded. meo checks it again when you open a file’s details.
Is two-factor authentication available?
Yes, with an authenticator app. Each person turns it on for their own account; once on, the code is required before any access to the data.
What does SOC 2 Type 2 mean for my clients?
That meo’s security is audited from the outside: an independent firm verifies our controls against the AICPA’s SOC 2 Type 2 standard. You can request the audit report through meo’s trust centre, trust.documeo.ca, and show it to your clients.