IRS Forms

Form 5305‑RA – Roth IRA Guide, Limits & Rules (2025-2026)

Practitioner guide to Form 5305-RA for 2025: Roth IRA custodial setup, $7,000/$8,000 contribution limits, MAGI phase-outs, five-year clock, and reporting traps.

20 min read Updated Jun 14, 2026
Editorial Standards
How we research, review, and update this guide

Every Accountably guide is researched against primary IRS sources, reviewed by a U.S. CPA, and refreshed as guidance evolves. Read our Editorial Guidelines to see how we source, fact-check, and update our content.

Tell us who you are – we will jump to what matters most:

Form 5305-RA looks deceptively easy. A client showed up with three Roth IRAs at different custodians and a sincere belief he could deduct his $7,000 contribution on Schedule 1. Two of the custodial agreements were the wrong model document, one was missing the Article V beneficiary election, and the deduction he expected was never on the table.

Form 5305-RA is the IRS model custodial account agreement for opening a Roth IRA under IRC §408A, signed by the depositor and custodian and kept on file, never sent to the IRS. For 2025 the contribution limit is $7,000, or $8,000 at age 50 or older, and the modified AGI phase-out runs $150,000 to $165,000 for single filers and $236,000 to $246,000 for married filing jointly. The form is short, but the rules behind it, the cash-only contributions, the phase-outs, the five-year clock, and the post-death payout under Article V, decide whether the Roth delivers tax-free distributions decades later.

Key Takeaways

  • Form 5305‑RA is the IRS model agreement for a Roth IRA custodial account. Form 5305‑R is the model agreement for a Roth IRA trust account. Same Roth tax rules, different legal structure.
  • 2025 Roth IRA contribution limit is $7,000, catch‑up $1,000 at age 50 or older. 2025 Roth MAGI phaseouts, single $150,000–$165,000, married filing jointly $236,000–$246,000.
  • 2026 Roth IRA contribution limit is $7,500, catch‑up $1,100 at age 50 or older. 2026 Roth MAGI phaseouts, single $153,000–$168,000, married filing jointly $242,000–$252,000.
  • Qualified Roth distributions are tax free when two tests are met, the five‑taxable‑year period and a qualifying event such as reaching age 59½. Ordering rules, contributions come out first.
  • Reporting, custodians furnish 1099‑R by late January and file or furnish 5498 by the end of May or the next business day. For the 2025 tax year, 5498 is due June 1, 2026.

What Is Form 5305‑RA And Who Should Use It?

Form 5305‑RA is the IRS’s preapproved “Roth Individual Retirement Custodial Account” agreement. A bank, credit union, or trust company uses this form to open your Roth IRA without asking the IRS for a custom approval. You are the owner, you fund with after‑tax dollars, and the custodian holds the assets and runs the reporting playbook. If you see 5305‑RA, you are in a custodial setup. If your provider uses 5305‑R, that is the trust version. Either way, Roth rules apply.

Who should use it, anyone who wants a plain Roth IRA with standard terms and no custom provisions. You do not file 5305‑RA with the IRS. You sign it to establish the account, the custodian accepts it, and both of you keep it on file.

2025 and 2026 Numbers You Will Actually Use

Here are the limits and phaseouts you will cite most often.

Year Contribution limit Catch‑up (50+) Single MAGI phaseout MFJ MAGI phaseout
2025 $7,000 $1,000 $150,000–$165,000 $236,000–$246,000
2026 $7,500 $1,100 $153,000–$168,000 $242,000–$252,000

These ranges come directly from IRS releases. Keep them handy when you check eligibility or run year‑end contribution scenarios.

How 5305‑RA Actually Sets Up Your Roth IRA

Think of 5305‑RA as the contract that turns your intention into a compliant Roth IRA. You agree to fund with cash, follow limits, and respect Roth distribution rules. The custodian agrees to safeguard the account, keep accurate records, and report contributions and distributions on the IRS forms that tie your tax return to the account. This is why 5305‑RA matters, it gives you a clean, standardized frame so growth and withdrawals follow Roth treatment.

What, How, Wow

  • What, a standardized custodial agreement that creates a Roth IRA without custom drafting.
  • How, you sign the adoption agreement, name beneficiaries, fund with after‑tax dollars, and choose investments.
  • Wow, once your five‑year period has run and you meet a qualifying event like age 59½, your earnings can be withdrawn tax free, and your original contributions are available any time.

Pro tip, start your five‑year clock early. The clock begins on January 1 of the tax year of your first Roth contribution. Even a small opening contribution can start the timer for later, larger balances.

Custodian Duties And Your Role

Form 5305‑RA draws a clean line. You own the account and make the decisions. Your custodian, a bank, credit union, or IRS‑approved nonbank custodian, keeps the official books, processes your instructions, and files the information returns that match your tax return.

Responsibilities At A Glance

  • You, confirm eligibility, set contribution amounts within the annual limit, keep beneficiary designations up to date, and store records.
  • Custodian, accept contributions and transfers, track basis and conversions, apply Roth ordering rules on payouts, and handle the reporting, 1099‑R for distributions and 5498 for contributions and year‑end value.
Role Your Responsibilities Custodian Responsibilities
Setup Sign adoption agreement, complete beneficiaries Open account under 5305‑RA, retain acceptance
Funding Stay within limits and income phaseouts Accept cash contributions, eligible rollovers, conversions
Investing Choose and monitor investments Execute orders, maintain records, provide statements
Distributions Request and document withdrawals Apply ordering rules, furnish 1099‑R with proper codes
Year‑end Keep confirmations, track first Roth year File or furnish 5498 by the IRS deadline

Deadlines matter for clean filing. For a calendar‑year distribution, your custodian furnishes Form 1099‑R to you by late January. For the 2025 tax year, Form 5498 is due to the IRS and furnished to you by June 1, 2026, because the normal May 31 date falls on a weekend or holiday. That later date also reflects the fact that prior‑year IRA contributions run through mid‑April.

5305‑RA Or 5305‑R, Which One Am I Signing?

Here is the fast rule you can repeat to any client or teammate.

  • 5305‑RA, Roth Individual Retirement Custodial Account.
  • 5305‑R, Roth Individual Retirement Trust Account.

Both set up a Roth IRA, the difference is whether your provider uses a custodial or trust structure. Many retail providers default to 5305‑RA. Some banks and trust companies prefer 5305‑R. The tax result is the same, so you are choosing paperwork mechanics, not changing Roth rules.

Why The Distinction Still Matters

  • The title on your paperwork will drive the internal process your provider uses.
  • Your beneficiary page and signatures must match the agreement type.
  • If you ever need copies for an audit or a beneficiary claim, the exact form title helps the custodian pull the right documents.

Eligibility Rules To Check Before You Fund

You need three green lights before you put a dollar into a Roth IRA for a given year.

  • Earned income, your total IRA contributions for the year cannot exceed your taxable compensation.
  • Annual limit, see the table below for 2025 and 2026.
  • MAGI phaseout, check where your modified AGI lands by filing status. In 2025, the Roth phaseout is $150,000–$165,000 for single and $236,000–$246,000 for married filing jointly. In 2026, it moves to $153,000–$168,000 and $242,000–$252,000.

If you are above the top of your range, a direct Roth contribution is not allowed. A Roth conversion is a separate path and is not limited by MAGI, though the conversion is taxable.

Spousal And Filing Status Notes

  • Spousal Roth, you can fund a Roth for a non‑earning spouse if you file jointly and the working spouse’s earned income covers both contributions.
  • Married filing separately (if you lived with your spouse at any time during the year), the Roth phaseout is $0–$10,000, which effectively blocks direct Roth contributions in most cases. Unlike the single and joint ranges, this $0–$10,000 band is not indexed for inflation and stays the same every year.

How To Complete Form 5305‑RA, Step By Step

You do not file 5305‑RA with the IRS. You complete it to establish the account, then your custodian accepts it.

  • Enter your legal name, address, SSN, and date of birth, and the custodian’s legal name and address.
  • Confirm it is a Roth custodial account, then note whether you will fund with current‑year contributions, transfers, or conversions.
  • Name primary and contingent beneficiaries with full details and percentages that add to 100.
  • Sign and date the adoption agreement and any attached beneficiary form. Get the custodian’s acceptance.
  • Keep copies, set a funding reminder, and start your five‑year clock.

Firm workflow tip, add a short beneficiary check at onboarding and each January. This takes minutes and prevents the worst disputes later.

Contribution Limits, Deadlines, And The Five‑Year Clock

Let’s make your funding plan simple and accurate.

  • Limits, $7,000 for 2025, $7,500 for 2026. Catch‑ups, $1,000 and $1,100 if you are 50 or older. Never exceed your earned income for the year.
  • Deadline, you can fund a prior‑year Roth IRA through the federal filing deadline the next April. Your custodian will reflect prior‑year contributions on the Form 5498 that is due by the end of May or the next business day, which is June 1, 2026 for the 2025 year.
  • Five‑year clock, it starts on January 1 of the tax year of your first Roth contribution. Starting early can unlock tax‑free earnings later.

After‑Tax Contributions And Your Roth Basis

Roth IRA contributions are after tax. That makes your contribution “basis,” which you can withdraw any time without tax or penalty. When money comes out of a Roth IRA, contributions leave first, then conversions, then earnings. Those ordering rules are your safety net in a rough year.

Correcting Excess Contributions

If you overfund or your MAGI ends up above the allowed range, remove the excess and the associated earnings by the filing deadline to avoid the 6 percent excise tax. Ask your custodian to process a “return of excess” so your 1099‑R and 5498 align with your return.

Beneficiaries, The Small Paper That Protects Your Plan

Your beneficiary form is more important than most people realize. List primary and contingent beneficiaries with full details and percentage splits that total 100. Update after marriage, divorce, births, deaths, or a move. If you die without a valid beneficiary on file, the account often passes to your estate, which can reduce flexibility for your heirs and create extra work. The right paperwork keeps your plan smooth and supports the 10‑year post‑death timeline that applies to most non‑spouse beneficiaries.

Quick cadence I use with clients, confirm beneficiaries at account opening, then review every January with W‑2s and 1099s. It takes five minutes, and it saves months of headache later.

Qualified Distribution Basics And Timing

A Roth IRA payout is “qualified,” and therefore tax free, only when two things are true, your five‑taxable‑year period has run and you hit a qualifying event, most commonly reaching age 59½. If a distribution is not qualified, only the earnings portion is taxable, and a 10 percent early distribution penalty can apply unless you meet an exception.

Common Exceptions To The 10 Percent Penalty

  • Disability or death
  • First‑time home purchase, up to $10,000 lifetime
  • Certain education or medical expenses
  • Substantially equal periodic payments under 72(t)

These exceptions can remove the penalty, the earnings may still be taxable if the payout is not qualified.

Simple example, if you take $5,000 from a young Roth IRA and you have at least $5,000 of contribution basis, that entire withdrawal can be free of tax and penalty because contributions come out first. If any earnings come out early, expect income tax and possibly the 10 percent penalty unless an exception fits.

Rollovers, Conversions, And Safer Ways To Move Money

When you shift retirement money, keep it clean.

  • Trustee‑to‑trustee transfer or direct rollover, best choice because the funds move institution to institution, no 60‑day clock, no surprise withholding, and the “one‑per‑12‑months” limit does not apply to direct movements.
  • 60‑day rollover, allowed but riskier. You must redeposit in 60 days, you are limited to one IRA‑to‑IRA rollover in any 12‑month period, and withholding can derail your plan if you do not replace it.

Converting To A Roth IRA

Conversions are taxable in the year you convert, unless you have basis. Since 2018, you cannot recharacterize a completed Roth conversion back to traditional, so plan your amount and withholding carefully. Track each conversion date because a separate five‑year penalty clock applies to converted dollars if you take them out early.

Practical move, use a direct trustee transfer for conversions. It avoids the one‑per‑year rollover rule and creates clean records for your files and your custodian.

Reporting Without The Mystery, Forms 1099‑R And 5498

  • Form 1099‑R reports distributions. You receive it by late January. Box 7 codes drive how you report the payout on your return.
  • Form 5498 reports your year‑end fair market value, contributions, rollovers, and conversions. The custodian files and furnishes it by the end of May or the next business day. For the 2025 year, that date is June 1, 2026.

If a number looks off, ask for a corrected form. Matching what appears on 1099‑R and 5498 to your return is the simplest way to avoid notices.

What You Do vs What The Issuer Does

Role Your Responsibilities Issuer Responsibilities
Setup Sign 5305‑RA, complete beneficiaries, keep copies Open account, retain agreement and acceptance
Funding Stay within annual limits and income ranges Accept contributions, conversions, and direct rollovers
Investing Choose and rebalance investments Execute orders, keep accurate records
Distributions Request and document purpose if needed Apply ordering rules, furnish 1099‑R
Records Track first Roth year and each conversion date File or furnish 5498 by deadline, track FMV and boxes

Common 5305‑RA Mistakes To Avoid

  • Missing or outdated beneficiary forms, or percentages that do not total 100.
  • Confusing “RA” with “R” and asking the institution for the wrong packet.
  • Overfunding, either above your earned income or after a year‑end bonus pushes your MAGI over the top of the Roth range.
  • Using a 60‑day rollover where a direct transfer would have been cleaner.
  • Tapping converted dollars too soon, forgetting that each conversion has its own five‑year penalty clock.

Small firms, standardize a one‑page intake, eligibility check, beneficiary verification, and a conversion log. These small habits stop big problems in April.

Real‑World Scenarios To Pressure‑Test Your Plan

  • Your MAGI drifts into the phaseout late in the year, make a partial Roth contribution that fits the allowed amount, then consider a planned conversion for the rest.
  • You want to move a Roth IRA between custodians, choose a trustee‑to‑trustee transfer to avoid the 60‑day clock and keep records clean.
  • You inherit a Roth IRA as a non‑spouse, confirm whether the 10‑year rule applies and whether the original owner’s five‑year clock has run, which can make earnings tax free when distributions are taken.

I keep a one‑page “Roth clocks” sheet in each client’s file, first Roth contribution year and each conversion date. It turns complicated conversations into quick, confident answers.

Step‑By‑Step Play You Can Reuse

  • Confirm eligibility, earned income for the year, filing status, and where your MAGI lands inside or outside the phaseout.
  • Pick the right document, 5305‑RA for custodial or 5305‑R for trust, complete and sign the adoption agreement.
  • Lock beneficiaries, primary and contingent, with full details and percentages that add to 100, then store a copy with your records.
  • Fund on time, $7,000 in 2025 or $7,500 in 2026, with the right catch‑up if you are 50 or older.
  • Move money the safe way, use trustee‑to‑trustee transfers or direct rollovers rather than 60‑day rollovers when possible.
  • Track clocks, record the first Roth contribution year for the five‑taxable‑year test and each conversion date for the separate penalty clocks.
  • Reconcile forms, match 1099‑R and 5498 to your return and ask for a corrected form if something does not line up.

Quick Reference Table

Action Best method Why it helps
Move IRA to IRA Trustee‑to‑trustee transfer No 60‑day risk, not counted toward one‑per‑year rollover limit
Move employer plan to IRA Direct rollover Avoids withholding and deadline risk
Above Roth income limit Consider conversion Direct contributions are income‑limited, conversions are not, taxes apply
Fix an excess Return of excess with earnings Stops the 6 percent excise and aligns 1099‑R and 5498

Final Word, Make The Form Work For You

Form 5305‑RA is not glamorous, but it is powerful. It gives you a simple, compliant Roth IRA so you can save with clarity. Choose the right form, confirm eligibility with the current IRS limits, complete and keep your beneficiary paperwork, and use direct transfers for clean moves. Do those things and your Roth IRA will feel easy to run, even in a busy season.

Common Mistakes We See Every Season

Across hundreds of Roth IRA intakes, the same handful of errors land on our review desk every season. None are visible on the form itself – they surface in Article V at the wrong moment, on the next 1099-R, or in an IRS excess-contribution notice twelve months after the slip.

1. Filing 5305-RA with the IRS or attaching it to Form 1040. The form carries a "Do not file" instruction in its upper-right corner. The executed agreement is retained in the depositor's and custodian's records, and the IRS never receives a copy. New custodians occasionally mail it to a service center or staple it to the depositor's 1040; neither step is correct.Fix: Treat 5305-RA as a contract kept in client and custodian files. Reference it on the disclosure statement required by Treasury Reg §1.408-6, not on any return.
2. Using the 2017 dollar amounts printed on the form. The form text still shows $5,500 base, $6,500 catch-up, $118,000-$133,000 single phase-out, and $186,000-$196,000 MFJ phase-out. Article I and Article II both contain a COLA clause that updates those numbers each year. For 2025, per IRS Notice 2024-80, the contribution limit is $7,000 (under 50) or $8,000 (age 50 and older), the single phase-out is $150,000-$165,000, and the MFJ phase-out is $236,000-$246,000.Fix: Pull the current-year limits from the latest IRS Notice before the depositor signs and write the year-applicable numbers onto the working copy of the agreement.
3. Confusing 5305-RA with 5305-R or 5305-A. 5305-RA is the model agreement for a Roth IRA custodial account. 5305-R is the Roth IRA trust version. 5305-A is the traditional IRA custodial account. The three look alike, but the legal structure and tax treatment they create are not interchangeable.Fix: Match the form to the legal structure being created – custodial versus trust, Roth versus traditional – before the depositor signs.
4. Treating the MFS phase-out as if it gets a COLA bump. Article II expressly excludes the $0-$10,000 married-filing-separately range from any cost-of-living adjustment, per IRS Notice 2024-80. An MFS depositor who lived with the spouse at any point in the year contributes a partial amount only between $0 and $10,000 of MAGI, and nothing at $10,000 or above. The range never moves.Fix: Flag MFS filers at intake. If MAGI sits above $10,000, the only Roth IRA path is a backdoor route through a nondeductible traditional contribution followed by a conversion.
5. Assuming a surviving spouse beneficiary defaults to beneficiary treatment. Under Article V(3), a surviving spouse named as designated beneficiary on Form 5305-RA is treated as the owner of the Roth IRA, not as a beneficiary. Owner treatment is usually the right call, but it removes the pre-59 1/2 distribution exception that beneficiary treatment would carry.Fix: Where beneficiary treatment is wanted (often for creditor protection or to allow early withdrawals without the 10 percent additional tax), add an overriding provision in Article IX at signing. Our U.S. tax preparation team drafts and reviews that override against current §408A guidance before the depositor signs.
6. Counting age 59 1/2 as the only qualified-distribution test. A qualified Roth IRA distribution requires both prongs: the 5-year holding period (measured from the first tax year a Roth IRA contribution was made to any Roth IRA owned by the depositor) AND one of age 59 1/2, death, disability, or a first-time-homebuyer purchase capped at $10,000 lifetime. Earnings withdrawn before the 5-year clock is satisfied are taxable even when the depositor is past 59 1/2.Fix: Stamp the first-contribution year on the custodian record at account opening, then surface that date on every distribution review.

Reusable Checklists

These three checklists drop straight into a firm SOP – one for the intake conversation, one for the Article V beneficiary review, and one for the January 1099-R and 5498 reconciliation. Each item ties back to a specific 5305-RA provision or to the 2025 figures published in IRS Notice 2024-80.

Roth IRA Intake Packet

  • Confirm the depositor's modified AGI against the 2025 ranges: single $150,000-$165,000, MFJ $236,000-$246,000, MFS frozen at $0-$10,000.
  • Verify earned compensation is at least the contribution amount being made for the depositor and any contributing spouse.
  • Confirm the current-year limit applies: $7,000 base, or $8,000 with the $1,000 age-50 catch-up.
  • Mark the form revision date (April 2017) and catalog number (25094Y) on the file copy so future reviewers know which model document was signed.
  • Stamp the first-contribution year on the custodian record as the start of the 5-year qualified-distribution clock under §408A.
  • Verify the contribution is cash-only; the only exceptions are §408A(e) qualified rollovers and §408A(d)(6) recharacterizations between a Roth and a traditional IRA.
  • Deliver the Treasury Reg §1.408-6 disclosure statement and log the delivery date.
  • File the executed agreement in client and custodian records. Do not send any copy to the IRS.

Article V Beneficiary Review

  • Identify whether each designated beneficiary is the surviving spouse or a non-spouse beneficiary.
  • For a spouse beneficiary, decide explicitly between owner treatment (the Article V(3) default) and beneficiary treatment (which requires an Article IX override).
  • For a non-spouse beneficiary, document the post-death payout method: life-expectancy method under Article V(1)(a) or the 5th-anniversary rule under Article V(1)(b).
  • Flag deaths occurring after 12/31/2019 for the SECURE Act 10-year rule, which overrides the form's pre-SECURE payout language for most non-spouse designated beneficiaries.
  • Confirm the divisor source for the life-expectancy method is the Single Life Table in Reg. §1.401(a)(9)-9, valued as of December 31 of the preceding year and reduced by one each subsequent year.
  • Revisit the election after every life event (marriage, divorce, birth, death, residency change) and re-execute Article V if the beneficiary list changes.
  • Strike a line through any unused Article IX space at signing, per the form's printed instruction.

January 1099-R and 5498 Reconciliation

  • Pull every 1099-R issued for the prior year and tie each distribution to a contribution year, conversion year, or post-death payout.
  • Confirm 5498 reports the correct contribution total against the depositor's Article I cash contributions for the year.
  • Reconcile any §408A(d)(3)(E) conversion reporting separately from regular annual contribution reporting.
  • Flag any contribution that breached the §4973 excess-contribution limits and document removal of excess plus earnings before the 6 percent excise tax applies for another year.
  • Confirm MFS depositors with MAGI at or above $10,000 have a matching excess-contribution removal if any Roth IRA contribution was made.
  • For each qualified distribution, confirm the 5-year clock is satisfied AND a §408A triggering event (age 59 1/2, death, disability, or first-time homebuyer up to $10,000 lifetime) applies.

Keep 5305-RA Season From Stalling

Roth IRA account-opening volume hits twice a year – once at year-end as contributors rush to fund the current year, then again in the spring as last-minute prior-year contributions stack up against the April deadline. Form 5305-RA itself is short, but the operational tail behind it is not: MAGI verification against the 2025 phase-out bands ($150,000-$165,000 for single filers and $236,000-$246,000 for joint filers, per IRS Notice 2024-80), beneficiary paperwork that has to survive an Article V audit later, and 1099-R / 5498 reconciliation the following January. A missed check at intake creates a 6 percent excise tax exposure under IRC §4973 that does not surface until twelve months after the error.

The fix is not faster typing on the form. It is a checklist that ties account-opening to the downstream reporting calendar so nothing reaches Article IX as an untested assumption.

  • Verify modified AGI against the 2025 ranges before the depositor signs Article II – single $150,000-$165,000, MFJ $236,000-$246,000, MFS frozen at $0-$10,000 (Article II expressly excludes the MFS range from any COLA, per IRS Notice 2024-80).
  • Confirm the catch-up math at intake: $7,000 base plus $1,000 for age 50 or older totals $8,000 for 2025, no more.
  • Stamp the five-year-clock start date next to the first contribution – the qualified-distribution test under IRC §408A(d) fails without it, even after the depositor crosses 59 1/2.
  • Record the Article V beneficiary election in writing and flag whether an Article IX override is needed – the default for a surviving spouse is owner treatment, not beneficiary treatment.
  • Map every account to a January 1099-R and 5498 hand-off, and tag any Roth conversions separately for IRC §408A(d)(3)(E) reporting.

That intake-to-reporting discipline is what we build into every Roth IRA workflow we run. Our U.S. tax preparation team handles intake, MAGI verification, beneficiary documentation, and year-end 1099-R / 5498 reconciliation under one delivery SLA, so the form stays clean from signing through the next filing season.

FAQs

What is IRS Form 5329 and when would I need it?

Form 5329 calculates additional taxes like the 10 percent early distribution penalty and the 6 percent excise tax on excess IRA contributions, and it is where you claim exceptions to remove penalties. You attach it to your Form 1040 for the year it applies.

What is IRS Form 5305 in general?

“5305” is the IRS model agreement family for IRAs. For Roth IRAs, 5305‑RA is the custodial version, and 5305‑R is the trust version. Providers pick which structure they support, the Roth tax rules remain the same.

Why can’t I deduct my Roth IRA contribution?

Roth contributions are after tax by design. The tradeoff is the potential for tax‑free qualified withdrawals later and no lifetime RMDs for the original owner. If you want a current‑year deduction, compare a traditional IRA and check deduction limits based on income and plan coverage.

How do I figure the taxable amount of a Roth IRA distribution?

Start with your 1099‑R, then apply Roth ordering rules. Contributions come out first and are tax free, then conversions, then earnings. If the distribution is not qualified, only the earnings portion is taxable and may face the 10 percent penalty unless an exception applies.

Every Form Represents Work Your Team Has to Deliver

Accountably embeds trained offshore teams into your workflow – so more returns get handled without more burnout.

30-Day Guarantee 20+ Firms Served SOC 2 Aligned