.svg)
English
You don't need new software: we build the control system in your existing tools. The auditor's fee for Type I and Type II is billed directly by the audit firm.
Less than 2 months from kick-off to the Type I audit. The Type II report follows after the observation period, usually 3 to 12 months, in which the controls demonstrably operate. We name the date before we start.
One contact person on your side for coordination and approvals, usually a few hours per week. We build the documentation, workflows and evidence.
The report is issued by an independent, AICPA-licensed audit firm. We recommend auditors with SOC 2 experience, coordinate the date and support Type I and Type II.
A control system along the Trust Services Criteria, at least Security, optionally Availability, Confidentiality, Processing Integrity and Privacy, with a system description, control matrix and evidence from daily operations, examined by the auditor in Type I and Type II. What the criteria require in detail is on our SOC 2 page.
.svg){kind=icon}
