attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
CS Disco
Legal tech
DISCO's AI-driven legal software and services raise the bar by offering cloud-based solutions developed by lawyers for
DataRobot
AI infrastructure
DataRobot delivers the industry-leading AI applications and platform that maximize impact and minimize risk for your
DataSnipper
Finance and accounting
Trusted by all top 100 accounting firms, DataSnipper's AI agents handle audit and finance testing while your team stays in
CORTO
Legal tech
CORTO helps law firms work faster, smarter, and more confidently with AI built for legal
Draftwise
AI tools
Contract and negotiation AI built for lawyers
Echelon Technologies
Analytics
Purpose-built AI for decision makers and business operations
Edpuzzle
Education
Easily create beautiful interactive video lessons for your students you can integrate right into your
Entersekt International
Customer support
Enhance your digital banking with adaptive authentication and real-time risk intelligence that reduces fraud, improves customer experience
Fazeshift
Finance and accounting
AI agent for Accounts Receivable
Action Verb
Cloud storage
Files.com moves and manages every file your business depends on — across any cloud and any partner, from one
Finatext
finatext.com
「金融をサービスとして再発明する」をミッションに掲げるFinatextグループのWEBサイトです。Finatextグループが有するデジタル技術とデータ解析力を最大限に活用し、事業者や金融機関との協業を通して、顧客視点に立った金融サービスを追求します。
Finix Canada
Payments
Finix is a payments technology provider enabling businesses to accept and send payments online or in
FirstIgnite
AI tools
AI-Powered Business Development for Scientific Organizations
Stream.io
Networking
Scalable and fast APIs for building social networks and
Zowie
Customer support
The AI agent platform leading enterprises trust to run in
Guesty
Real estate and property
The management platform for the short term rental industry.
Haku App
Nonprofit and fundraising
haku is the all-in-one platform for endurance events and
HG Insights
Research and data providers
HG Insights provides Revenue Growth Intelligence Solutions backed by extensive customer services to accelerate time to
Honorlock
DevOps and observability
Secure online exams with online proctoring that combines live monitoring with AI to detect cell phones, block AI, lock the browser, and
Hyperbound
Sales tools
Revenue Activation Platform
Hyros
Analytics
Hyros is the only Ad Tracking Software trusted by thousands of businesses to get accurate ad performance
iClassPro
Scheduling
Streamline your success with industry-leading Class Management
IKASI
Analytics
Our causal AI SaaS platform has been proven to increase profits immediately within days and continuously improve PnL results over
Incode Technologies
Government and public sector
Identity verification software that checks documents, biometrics, and government records in one
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read