Definition

SOC 2

SOC 2 is an attestation report, issued under AICPA standards, that tells customers whether a service organization protects their data against agreed criteria for security, availability, processing integrity, confidentiality, and privacy. An independent CPA firm examines your controls and reports on how well they meet the Trust Services Criteria you select. Software vendors, hosting providers, and any company that handles client data on their behalf lean on SOC 2 to shorten vendor security reviews. The report speaks to a specialist audience, so recipients usually sign an NDA before they receive it.