SOC 2 is an attestation framework from the AICPA built on the Trust Services Criteria: Security (mandatory), plus optional Availability, Confidentiality, Processing Integrity, and Privacy. A Type II report has an independent CPA firm test whether your controls operated effectively over a period, typically 3–12 months. The de-facto trust report for SaaS — an independent CPA attestation over your security controls.
All frameworks · ISO 27001:2022 · CSA CCM v4 · HITRUST CSF · NIST Cybersecurity Framework 2.0
Features · Integrations · Pricing · Frameworks · Consultants · About · Blog