Does AuditConfirmations have or need a SAS 70?
No. SAS No. 70, as amended, is not applicable to every service provided by a service organization. It is applicable only if the service is part of the user organization’s (ie, audit client) information system (AICPA Audit Guide, Service Organizations:Applying SAS No. 70 As Amended, par. I-06). AuditConfirmations is not part of an audit client’s information system and processes no financial transactions for an audit client.