Updated September 28, 2026

What is SOC 2?

In short

SOC 2 is an outside auditor's report on the controls a company uses to protect data, with the type and period stated on it.

SOC 2 is an audit report on the controls a company uses to protect data, covering security and, depending on the report, availability and confidentiality. It comes from an outside auditor and applies to a stated period, so the report type tells you how much it says. Anthropic lists SOC 2. Allnodes pairs it with a broad set of other marks, ISO 27001, ISO 14001 and ISO 22301, and AssemblyAI lists SOC 2 Type 2, ISO 27001 and PCI DSS.

Sources