attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Meltwater News
Research and data providers
Turn media monitoring, social listening and AI signals into actionable intelligence with
Mendel
Finance and accounting
Workflows to empower employees to spend while finance stay in control
MentorcliQ
HR and HRIS
Explore #1 mentoring and ERG platform driving retention, development, and engagement at global
Mercury
Finance and accounting
Everything you do with
Merge API
Developer tools
Merge is the infrastructure layer for production
Meridian AI
meridian-ai.com
Meridian AI empowers private equity & private credit firms to source deals thematically, manage more efficient pipelines, and make better
Model N
Manufacturing and industrial
Model N supports the complex business needs of the world’s leading brands in pharmaceutical, medical device, high tech, manufacturing and
MOONPAY
Crypto and web3
Crypto asset service provider in EU
Moov Financial
Payments
Moov is the payments platform powering
Nango
Developer tools
A single API for all your integrations
NetRoadshow
netroadshow.com
NimbleWork
Analytics
NimbleWork is a leading B2B SaaS provider of collaborative AI-powered Adaptive Work and Project Management products and
Nuix
Analytics
Nuix Ltd is an Australian technology company that produces investigative analytics and intelligence software for extracting knowledge from
Obsidian Security
Compliance and GRC
Obsidian Security delivers complete SaaS security—gain control, stop threats, and ensure compliance across all your business
OpenClinica
Healthcare
Your source for clinical trial technology | eSource | EDC | ePRO | eConsent | eCOA | Randomization | Reporting | Rescue Study
Origami Risk
Compliance and GRC
Origami Risk delivers purpose-built risk, safety, and insurance software to streamline compliance, claims, and operations, all on a
RSA Security
Security
Outseer delivers all-cause fraud prevention using predictive AI, real-time behavioral biometrics, and global consortium data—detecting and
Passport Labs
Compliance and GRC
Passport is the #1 parking compliance platform for cities — mobile payments, digital enforcement, permitting, and curbside
Centavo
DevOps and observability
Payabli delivers payment infrastructure through a single unified API, enabling software platforms to embed, manage, and scale
Pay One
payone.io
Home Page - PayOne | One
PCI Pal
Communications and CPaaS
Secure contact center payments, boost CX, and achieve PCI
PhotoCircle
Productivity
PhotoCircle® is a secure media-sharing platform for families, social groups, schools, nonprofits, and businesses to easily connect, share
PixieBrix
pixiebrix.com
For customer care operations teams: see every agent action in the browser, intervene in real time before problems become real, and enforce
Posit Software PBC
Developer tools
Posit is the enterprise data science platform trusted by 52 of the Fortune
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read