SOC 2 compliance

Topic

SOC 2 (System and Organization Controls 2) is a voluntary compliance standard for service organizations, developed by the American Institute of Certified Public Accountants (AICPA). It specifies how organizations should manage customer data based on five Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy. A SOC 2 report provides an independent audit of a company's internal control systems to ensure they meet these rigorous security standards.