Offer type: Attestation / audit report

Reference code: SOC_2

System and Organization Controls — Type I/II reporting.

Scope

SOC 2 is independent reporting on system and organization controls against AICPA Trust Services Criteria (Type I / Type II). It is not an ISO 17021 management-system certificate; the typical output is an auditor’s report.

Benefits

• Security trust signal for customers / investors
• Documented control design and operation
• Language for SaaS / cloud vendor assessment

Typical process

• Trust Services Criteria and scope (system description)
• Control inventory and evidence plan
• Readiness / gap closure
• Independent auditor fieldwork
• Type I or Type II report

Report use and distribution are limited by client agreement; “SOC 2 certified” can be misleading — the accurate phrase is “SOC 2 report”.

This page describes the certification / assessment service. Licensed standard text is not distributed. Request a quote for scope, duration and pricing.