Compliance Glossary

A SOC 2 Type 2 report is an assessment of an organization’s controls over a period of time, typically six months to a year. It provides information on the design and operating effectiveness of the controls in place to protect the security, privacy, and confidentiality of sensitive customer data.

The report would also include information on the organization’s system development and maintenance processes and the controls in place to ensure the security of the company’s systems and infrastructure. The report would be based on an in-depth review of the organization’s systems and controls and a review of the organization’s policies and procedures over a specified period of time.