attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
PrimeRevenue
Procurement
Optimize cash flow & working capital with PrimeRevenue’s supply chain finance platform trusted by enterprises & their suppliers
Prisma Data
Developer tools
Prisma gives TypeScript and Node.js teams Prisma ORM, Prisma Postgres, and Prisma Compute: a type-safe ORM, managed Postgres, and Compute
Provectus IT
Life sciences and biotech
Provectus builds and operates production AI and data systems for enterprises in financial services and life
Quantum Workplace
Collaboration
Build thriving teams with Quantum Workplace's HR
Reality Defender
AI tools
Enterprise Deepfake Detection
Reelist
reelist.com
The talent you’re looking for is on
Avora
Sales tools
Revenue Intelligence platform that automatically captures sales activities to help you identify and fix revenue
Ripple Labs
Payments
Ripple is the leading provider of stablecoin-powered cross-border payments and digital asset custody
RR Donnelley RRD
Marketing
RRD offers the most trusted portfolio of marketing, packaging, print, and supply chain
Safe Software
Data platforms
We help organizations do more with their
SearchStax
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Sembly AI
Business services
Sembly â agentic AI platform for professional
SignalWire
Communications and CPaaS
Build AI voice agents, contact centers, and unified communications on one programmable
Sign In Solutions
Collaboration
Sign In Solutions, Inc., headquartered in Florida, USA, is a global provider of cloud-based visitor management and workplace risk
Simon Data
Marketing
Simon AI is the Agentic Marketing platform trusted by enterprise
Skynet Technologies
Developer tools
WCAG 2.1, 2.2, EAA, Website Accessibility Services including manual audit, website, PDF / doc remediation, VPAT ACR, Consulting for any
Softheon
Healthcare
All-in-one healthcare operations platform for enrollment, billing, payments, and member
Spark Hire
Recruiting
Spark Hire is the hiring software that combines a powerful ATS with our industry-leading video interviews and behavioral
Spin Technology
spin.ai
Founded in 2017 and Headquartered in Palo Alto, Spin.AI delivers the most innovating last line of cyberdefense, SaaS data management, and
Sprig
Analytics
Sprig is a unified research platform built for UX teams who need fast, relevant user
StarCompliance Operating
Developer tools
StarCompliance Enterprise simplifies conflict monitoring and regulatory compliance, helping firms reduce risk and stay ahead with
StarRez
Real estate and property
We enable student housing providers to manage every aspect of living both, on- and off campus, through a single unified
STRIVR
strivr.com
Empower your frontline with hands-free, AI-powered error detection, procedural guidance, and QA support delivered through smart
Swivel Transactions
swbc.com
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read