Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Redis
Data platforms
Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability
Typeform
Form builders and surveys
Typeform is a software as a service (SaaS) company that specializes in online form building and online surveys
checkout
Payments
Boost your acceptance rate, cut processing costs, fight fraud, and create extraordinary customer experiences with Checkout.com's payment
PAY2DAY Solutions
Payments
Designed Around Your Customers, Built for Your Business Omnichannel Payments - SMS, RCS, Web & App, Unified One platform to accept payments
Citcon
Payments
Accept digital payments
EPSG
Payments
Learn about Echelon, a trusted payment processing leader focused on integrity, innovation, and partner
EH Financial Services
Recruiting
Recruitment, HR, Payroll & Benefits in one place - designed for small & medium businesses to be efficient, compliant &
iQmetrix
E-commerce
Retail management, omnichannel, and point of sale systems for wireless
Mews Systems
Travel and hospitality
Mews is a cloud-based hospitality management software trusted by 15,000+ properties to automate operations, boost revenue & power the guest
MX51
mx51.com
Cora Systems
Project management
Streamline your projects with Cora Systems' enterprise project portfolio management
Coinflow Labs
Payments
Tech-driven payments solutions for your
Weel
Finance and accounting
Weel is the all-in-one platform for finance
Relay Financial Technologies
Banking and lending
Relay (Relay Financial), is an all-in-one business banking and money management platform helping businesses understand what they're
SpotOn Transact
Travel and hospitality
Run a more profitable restaurant with
Treasury Prime
Banking and lending
Embedded banking software platform and marketplace
Wingspan Networks
Compliance and GRC
Wingspan runs onboarding, payments, compliance, and tax filing for 1099 contractors, international contractors, and contingent W-2
Capital on Tap
Banking and lending
With the Capital on Tap business credit card, get up to £250k to grow your
Kushki Colombia
Payments
Procesa pagos con la solución omnicanal de
PAYMENTUS
Payments
Paymentus delivers secure, smart billing and payment solutions that boost engagement and on-time payments for businesses, governments
Mesh
HR and HRIS
Performance management platform that fits the way you work
Bird
Communications and CPaaS
The world’s largest omnichannel communications platform
Valence
HR and HRIS
Valences AI Powered Leadership Coach allows enterprises to offer executive level coaching at
Edge
Legal tech
The ultimate IP assistant.
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesExplainers
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read