attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Infinant
Banking and lending
Banking Technology to innovate above your core banking
InRule Technology
No-code and automation
InRule brings together business rules, process automation, and AI to design, test, and deploy governed decisions that meet regulations
Inscribe
Compliance and GRC
AI Document Fraud Detection for Banks, Credit Unions & Lenders
Interact Intranet
Collaboration
Deliver a better employee
Invoca
Sales tools
Convert more inbound leads with AI that engages, qualifies, and routes high-intent buyers across online and offline
Kaleris
Procurement
Our supply chain logistics platform connects shippers worldwide to an ecosystem that offers real-time insights on what's going on in the
Katalon
No-code and automation
Katalon True Platform unifies test management, automation, execution and production
KLDiscovery Ontrack
Legal tech
KLDiscovery delivers AI-driven eDiscovery software and services supporting litigation, investigations, and regulatory matters for legal
Kognitiv
Business services
We are a dedicated Workday services partner consultancy who offers a flexible, pay-as-you-use consulting model that perfectly complements
Koncert
Sales tools
Boost your B2B sales with
Kryterion
Education
Deliver secure, scalable certification exams with Kryterion’s online testing
Lakeside Software
IT management
Get end-to-end visibility across complex IT environments with the best data to enhance proactive IT, root cause analysis, and digital
Laurel AI
Finance and accounting
Laurel is the AI timekeeping platform for law, accounting & consulting firms—auto-capturing billable work and turning time into
LifeLenz
HR and HRIS
Workforce Management Platform built for you, loved by frontline
Linkby
linkby.com
Loyalty Juggernaut
Research and data providers
Agentic AI, real-time experiences, ecosystem-scale
LOCALPAYMENT S.A.C
localpayment.com
Building trust, one transaction at a
Luminance
Legal tech
End-to-End AI for Every Contract
Lunchbox Technologies
Travel and hospitality
Lunchbox is the only open, scalable restaurant technology solution that enables B2B catering, multi-channel ordering, and guest engagement
Lunos
Finance and accounting
Lunos is the AI partner that manages receivables just like you
mCard Technologies
Real estate and property
The credit card for your life at
magicplan
Real estate and property
Restoration workflow software that connects field to office
Magic School
Education
Transform teaching and learning with an AI platform built for school
MedaSystems
Healthcare
A cloud platform empowering global expanded and managed access
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read