SOC 2 is an attestation report issued by a licensed CPA firm under AICPA standards. It covers one or more Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy. It’s the report most US software buyers ask for.
A Type I report looks at the design of your controls at a point in time. A Type II report tests whether they operated effectively over a period, usually three to twelve months.
How we help: scoping the right criteria, readiness assessments, policy and control design, and evidence preparation before your CPA firm begins fieldwork.
Let's discuss your compliance needs
Whether you're just starting your compliance journey or navigating the next steps to maintain your security posture, our team is ready to help you.