Compliance Glossary

A SOC 2 Type 1 report assesses an organization’s controls at a certain point in time. It provides information on the design and implementation of the controls in place to protect the security, privacy, and confidentiality of sensitive customer data.

An example of a SOC 2 Type 1 report might include an assessment of an organization’s controls for protecting customer data stored in a cloud-based software-as-a-service (SaaS) platform. The report would provide information on the controls in place to ensure the data’s confidentiality, integrity, and availability, as well as the policies and procedures that are in place to protect the data.