attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Twic
Benefits and insurance
Forma’s flexible benefits software helps companies offer competitive benefits packages while reducing
Presidio
presidio.com
We give you the confidence to invest in AI and tech transformation, and the expertise to make it pay
Shortcut
Developer tools
Shortcut is a fast, lightweight and enjoyable project management platform where software teams and their AI agents plan, build, and ship
Alloy
Identity and access
AI prototyping tool for product managers
AMI
Manufacturing and industrial
AMI AssetTrack: Automate your hardware & IT asset management with our customizable, affordable enterprise-level
Ceros
No-code and automation
Create no-code interactive content that earns attention and drives
Cohere
AI infrastructure
Support automation that's actually intelligent
PlanetScale
Data platforms
PlanetScale offers the worldâs fastest and most scalable cloud hosting for Vitess, Neki, and
Caspio
Compliance and GRC
Caspio is an AI platform for building custom business applications, with annually certified HIPAA, SOC 2 Type II, and GDPR compliance and
PDQ
IT management
PDQ has simple, secure, and pretty damn quick IT device management solutions for effortless software deployment and
Appcues
Marketing
Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying
Daily
AI infrastructure
Conversational Voice and Multimodal AI built with Open Source
float
Project management
The #1 rated resource management
Hightouch
Marketing
The leading Composable CDP and AI Decisioning platform
Writer
AI assistants
WRITER is the enterprise AI agent platform trusted by Fortune 500 companies, built to help teams execute and scale on-brand, compliant
Adaptive Security
Education
Human security for the AI
Airship
Customer support
Airship is the only mobile-first customer experience platform that delivers measurable results through AI-powered, unified cross-channel
Aptean
Manufacturing and industrial
Run your business with software built for your
Chartbeat
Analytics
Chartbeat provides solutions combining instant real-time insights, rich engagement data, and powerful optimization tools for media
DroneDeploy
Real estate and property
See every inch of your site with
Fathom.video
CRM
Fathom captures, transcribes, and summarizes Zoom, Google Meet, and Microsoft Teams
Zipline
getzipline.com
With retail operations software from Zipline, you fulfill all your goals by unifying your entire
Kustomer
Customer support
Deliver faster, personalized support with Kustomer's AI customer service
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read