ISAE 3402

Assurance about the quality of internal control measures

ISAE 3402

Combining audits

An organization that outsources processes that have an impact on financial reportingnaturally wishes to do so with a reliable service organization. It is therefore important to be able to demonstrate that your customer can rely on your services. Having an ISAE 3402 statement is an important element in demonstrating that trust. During the ISAE 3402 audit, the quality of your service is determined by one of our independent auditors.  

The benefits of an ISAE 3402 statement

Combining audits offers certain advantages. It not only saves you on costs and time, but it also reduces the audit pressure within your organization: your employees only have to give insight into their daily activities once and can get back to work faster.

Assurance audits can easily be combined, and in many cases combining ISO audits and assurance audits can bring efficiency. 

Request our whitepaper for more information.

Combining audits

Het combineren van audits is over het algemeen een goed idee. U bespaart  hiermee niet alleen op kosten en doorlooptijd, maar verlaagt ook de  auditdruk binnen uw organisatie: uw medewerkers hoeven het verhaal maar één keer uit te leggen en kunnen sneller weer aan het werk.

Assurance audits kunnen over het algemeen onderling goed worden gecombineerd,  maar ook door het combineren van ISO audits en assurance audits is in  veel gevallen winst te behalen. 

Request our whitepaper for more information.

Which statement?

An assurance statement is an effective and efficient way to provide assurance to your customers about the processes they outsource to you. There are different kinds of statements. 

The primary question is: “Which assurance statement provides sufficient assurance for the processes outsourced to me by my client?”

Het antwoord vindt u onze whitepaper.

Our approach

Our approach has been proven to be effective and efficient and our auditors are highly experienced. This allows us to offer high-quality Privacy audit Wpg reports at a very competitive price. Please visit our Assurance Calculator for a quote.

Which statement?

An assurancestatement is an effective and efficient way to provide assurance to your customers about the processes they outsource to you. There are different kinds of statements. 

The question is: “Which assurance statement provides sufficient assurance for the processes outsourced to me by my client?”

The answer to this question can be found in our whitepaper.

Contact form ISAE 3402


As Valk Solutions, we automate business-critical point of sale processes for retail organizations. Our customers entrust us with their competition- and privacy-sensitive data. The ISAE 3402 statement is an independent confirmation for retailers that they are in good hands with us. Auvaro's audit team closely monitors that we work according to the standard every year. This sets us apart from the competition.

Karin Valk
Managing Director - Valk Solutions


Since 2016, Auvaro has been conducting the ISAE3402 audit at Itris. Itris' services to its customers are audited against NOREA's framework of standards. Since 2018, the ViewPoint functionality, Itris' ERP package, has also been audited against a framework of standards drawn up by Itris and its customers. For both audits, Auvaro issues an ISAE3402 type II statement annually. The audits are planned in close consultation with each other and are carried out in a pleasant manner by the auditors of Auvaro. We are therefore very satisfied with this service.

Marianne van Leeuwen
Manager Customer Support & Quality - Itris


Our ISAE 3402 audit was conducted efficiently and in a pleasant manner. The auditors guided us professionally.

Peter Van Den Plas
Information Security Officer - CACI B.V.


The audit process was carried out in a professional manner. Our ICT architects were impressed by the available ICT knowledge of the auditors. Conversations were conducted in a pleasant and constructive manner. It's very efficient that ISO 27001 and ISAE 3402 audits can be combined.

Theo van den Hoek
Program manager - Peopleware ICT Solutions


We wanted to investigate whether we could get an ISAE 3402 certification for our payroll service. After searching on the internet we came across Auvaro. After a first introductory meeting, we quickly started describing the processes and controls. Following Erik's advice, we then added and changed some checks and made some adjustments to our working method, after which we already received the first audit at the beginning of 2019. From this, some points emerged that have been adjusted and at the end of 2019 we received the final audit for 2019 and we were ISAE 3402 certified! The collaboration went very well and the certification also gives our customers the certainty that they can outsource their payroll administration with confidence.

Pier de Vries
Manager salary service - PeopleInc


We are an organization where a lot of information and personal data of our customers is processed. To provide a guarantee about our information security, we came to Auvaro about 3 years ago to guide us in this and to obtain an ISAE 3402 Assurance report. This year we were again audited by Erik and his team. It were intensive 'remote audit' days, but Erik and his team guided us in a very pleasant and flexible way. They were very thorough and precise and helped us with the right constructive feedback to have information security 'in control' even better.

Lisa Houwer
Security & Information Officer - Conclusion Learning Centers

previous arrow
next arrow