Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Tamr
IT management
Tamr's real-time AI-native MDM platform unifies, cleans, and enriches records to power AI initiatives, decision-making, and operations with
TeamDynamix
No-code and automation
TeamDynamix is a no-code AI ITSM
Tempo Software
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
OrgChart
HR and HRIS
Create, manage, and scale accurate org
Theta Lake
Collaboration
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
Third Iron
thirdiron.com
Thredd UK
Payments
Thredd is the AI-first issuer processing platform for prepaid, debit, credit, and virtual card
Ticketure
Customer support
Ticketing software for museums, zoos and
TrackVia
Project management
Optimize your task management and automate processes with TrackVia's custom
Tricentis
DevOps and observability
Accelerate software testing to keep pace with Agile and DevOps - with the industry's most innovative automated software testing
TRM Labs
Compliance and GRC
TRM is building a safer world for billions of people.
Unqork
No-code and automation
UnqorkAI helps organizations build and operate AI-generated applications with greater control, predictability, and
upcell
upcell.io
Userflow
userflow.com
Userflow is the AI-powered product adoption engine for customer-obsessed
UserTesting
Customer support
UserTesting is a platform for getting rapid customer feedback on almost any customer experience you can imagine, including websites, mobile
Return Path
Marketing
Validity's AI-powered email platform is trained on the world's largest email data network, helping teams send smarter, reduce risk, and
Veracross
Education
Eliminate data chaos with the leading student information system for private & independent K-12
Very Good Security
Networking
Integrate VGS into your technology stack to streamline payment tokenization, with our comprehensive card management platform, network token
Vimeo
Media and content
The video platform trusted by 287 million creatives, entrepreneurs, and
Yello
Recruiting
Yello's talent acquisition software and recruitment CRM is used by Fortune 500 companies to attract and nurture top talent from hello to
zencoder
Collaboration
Discover Zencoder's AI Coding Agent Platform for seamless code execution and
Ziflow
Project management
Review and approve content faster with Ziflow, online proofing software with automated workflows, 1,200+ file types, and
Zingtree
Developer tools
Zylo
Finance and accounting
Zylo is the enterprise SaaS spend management platform trusted by leading companies to deliver visibility, cost control, and AI-powered
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesExplainers
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read