attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Level Access
Compliance and GRC
From testing and fixing to reporting, our digital accessibility platform provides everything you need for globally compliant
NEOGOV
Government and public sector
NEOGOV is a AI-enabled government software company that provides a one-stop HR suite for the public
Patlytics
Research and data providers
Reduce cycle times. Increase margins. Augment research. Deliver winning IP outcomes.
Qgenda
Healthcare
Healthcare Workforce Management software to boost engagement and retention, optimize staffing, and reduce labor
Second Front Systems
secondfront.com
Stuck in authorization limbo? Get DoD authorization (ATO) or FedRAMP authorization in weeks, not
Stell Engineering
Compliance and GRC
AI-native requirements management for engineers managing mission-critical
TrackVia
Project management
Optimize your task management and automate processes with TrackVia's custom
Unqork
No-code and automation
UnqorkAI helps organizations build and operate AI-generated applications with greater control, predictability, and
Valid8 Financial
Finance and accounting
Transform raw banking evidence and accounting data into evidential proof that’s complete, accurate, and ready for the courtroom or
VisibleThread
Research and data providers
Full-lifecycle RFP intelligence, traceable AI insights, and security without
Yello
Recruiting
Yello's talent acquisition software and recruitment CRM is used by Fortune 500 companies to attract and nurture top talent from hello to
Intercom
Customer support
Intercom is the only helpdesk with a natively integrated AI Agent, Fin, meaning every customer conversation improves the next one, enabling
Blink
Collaboration
The mobile-first employee experience platform that connects your people, systems, and culture in one
Text
Customer support
Your support team talks to more customers than anyone in your
Sim
AI infrastructure
Build autonomous AI agents for enterprise systems
Alpaca
Developer tools
API-first stock and crypto brokerage platform
Paylocity
Finance and accounting
Paylocity Holding Corporation is an American provider of cloud-based payroll, spend management, and human capital management (HCM) software
Riot
Security
Cybersecurity awareness for fast growing companies
Gem
Recruiting
Talent engagement platform
LiveKit
Developer tools
An open source framework and developer platform for building, testing, deploying, scaling, and observing agents in
Quickbase
No-code and automation
Quickbase is a cloud-based platform that allows businesses to create custom applications and workflows to streamline their processes and
Radar
Developer tools
Radar helps teams fight fraud, optimize operations, and engage customers, powered by the most accurate, real-time location and device
Algolia
Developer tools
A developer-friendly and enterprise-grade search API.
Front
Customer support
Customer communications hub for building strong relationships
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read