SPRY Completes SOC 2 Type II Examination for Its AI-Native Outpatient Rehabilitation Platform

WILMINGTON, Del., October 13, 2026 — SPRY Therapeutics Inc., the AI-native EMR and revenue cycle management platform built for outpatient rehabilitation, today announced that it has received its SOC 2 Type II report following an independent examination of controls supporting the SPRY platform.

The examination was conducted by Assurion Services LLC and covered the Security, Availability, and Confidentiality Trust Services Criteria.

“Healthcare software is being asked to carry more responsibility, and that raises the standard for how the platform underneath it has to be built,” said Jebu Ittiachen, Chief Technology Officer at SPRY. “Security, access controls, traceability, and meaningful human oversight have to be part of how the technology is designed and operated from the beginning.”

SOC 2 is an assurance framework developed by the American Institute of Certified Public Accountants (AICPA) for reporting on controls at service organizations. In a SOC 2 Type II examination, an independent CPA firm evaluates the suitability of the design of specified controls and their operating effectiveness over a defined period. 

SPRY works with more than 1,000 rehabilitation clinics across the United States, connecting clinical documentation, patient access, eligibility and prior authorization, billing, revenue cycle management, payments, and analytics in one platform. As more of that work becomes connected, and AI takes on a greater role across healthcare operations, the security and operational controls behind the technology become increasingly important.

SPRY’s SOC 2 Type II report adds to the company’s existing healthcare security and compliance foundation, including HIPAA compliance and ONC Certified Health IT.

The milestone also comes as SPRY expands the role of AI across documentation, patient access, eligibility and prior authorization, and revenue cycle workflows. As those capabilities take on more work, SPRY is investing in defined access and permissions, traceability, monitoring, human review where appropriate, and clear handling of exceptions.

For outpatient rehabilitation organizations, these workflows are closely connected. Information captured during care can inform documentation and authorization requirements. Eligibility and authorization status can affect patient access. Clinical and payer information ultimately feeds billing and revenue cycle operations.

SOC 2 Type II provides independent assurance over specified controls within the operating environment supporting those workflows. It does not assess the accuracy of an individual AI output or workflow decision; those require their own product evaluation, monitoring, and safeguards.

Healthcare organizations can learn more about SPRY’s security, privacy, and compliance practices, including SOC 2 Type II, HIPAA compliance, ONC Certified Health IT, interoperability, reliability, and data lifecycle controls through SPRY’s Trust, Security & Compliance resources.

Additional security and compliance documentation is available through the SPRY Trust Center.

About SPRY

SPRY Therapeutics Inc. is an AI-native platform built for outpatient specialty care. Serving more than 1,000 clinics, SPRY supports providers across independent and multi-location practices, health systems, and home-based and mobile care. Its platform brings together digital intake, scheduling, real-time eligibility and prior authorization, AI-assisted documentation, coding, billing, payments, and analytics in one system, helping care teams reduce administrative work and improve operational and financial performance. SPRY has earned top ratings on G2 (4.8/5) and Capterra (4.9/5), and was ranked #1 by Black Book Research in the Ambulatory EHR category for Physical & Occupational Therapy in 2026. For more information, visit https://www.spryhealth.ai/