Skip to content

Compliance

SOC 2 Type 2

Quick answer

SOC 2 Type 2 is an audit report attesting that an organisation's security controls operated effectively over a period, typically six to twelve months.

SOC 2 Type 2 is an audit report attesting that an organisation's security controls operated effectively over a period, typically six to twelve months.

Why it matters

The distinction from Type 1 matters: Type 1 says the controls existed on one day, Type 2 says they worked for a year. Ask which one you are being shown.

Your next build could be twice as fast, at half the price

Start free. Migrating away is the same one line, and we publish that diff too.