Guides
SOC 2, explained without the jargon.
Free guides for founders, CTOs and the engineer who just got handed "the SOC 2 thing." Start with the basics, then use the checklist to see where you stand.
What is SOC 2?
What a SOC 2 report is, who issues it, what it covers, and how customers use it in security reviews.
Read →Type I vs. Type II
Point-in-time versus period-of-time testing, how to pick an observation window, and when bridge letters come in.
Read →The Trust Services Criteria
Security, Availability, Processing Integrity, Confidentiality and Privacy, plus the CC1–CC9 common criteria in practical terms.
Read →Readiness checklist
Twenty questions across the areas auditors test most. Your answers stay in your browser.
Take the checklist →