SOC 2 Type 2 Compliance

What is SOC 2 Type 2 Compliance?

SOC is an abbreviation of “system and organization controls,” and SOC 2 is the certification one gets for demonstrating strict security, confidentiality, availability, processing integrity, and privacy of customer data in the cloud. SOC 2 Type 2 is the designation that cloud data management vendors receive after a six-month audit, in which they verify the suitability of design and operational effectiveness of their managed service. SOC 2 was established by the American Institute of Certified Public Accountants (AICPA) with certification issued by independent, third-party auditors.

Who Has to Comply with SOC 2 Type 2?

No industry is required to have SOC 2 Type 2 certification; however, it is used as the gold standard to assess the capabilities of a cloud data management vendor. Many organizations—especially those in highly regulated industries or who store sensitive information—will use SOC 2 Type 2 compliance as a benchmark for cloud readiness.