attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Yoodli
Sales tools
Enterprise AI roleplay platform for sales enablement, partner training, and
15Five
HR and HRIS
15Five is the performance management platform that creates effective managers, highly engaged employees, and top-performing
ActivTrak
Research and data providers
ActivTrak’s work intelligence helps leaders understand how work gets done across people, tools and
aPriori
apriori.com
Cyble
Security
Cyble - World’s First Intelligence-Driven, AI-Native Security…
GBG
Identity and access
We offer a range of solutions that help organisations quickly validate and verify the identity and location of their
Assembly
HR and HRIS
Employee recognition platform to celebrate milestones, reward contributions, and empower managers to build a culture where teams thrive
OPSWAT
opswat.com
Rocket Lawyer
Productivity
Rocket Lawyer makes the law affordable and
Vidyard
Marketing
Vidyard is an online video platform for business which allows you to increase leads, accelerate your pipeline and delight your
WorkZone
Project management
Workzone helps teams stay organized, meet deadlines, and collaborate better with powerful, easy-to-use project management software built
Aerospike
Data platforms
Aerospike is the real-time database for AI, trusted in the
Project Affinity
Research and data providers
Affinity helps private equity and VC firms source deals, manage relationships, and close faster with AI-powered relationship intelligence
AlertEnterprise
Identity and access
The future of work requires cyber-physical security
Alert Media
Communications and CPaaS
Reduce risk & recover faster with AlertMedia's unified
Ambition
Sales tools
Coaching and gamification software for sales teams.
Applitools
No-code and automation
Applitools is an AI-powered end-to-end testing platform that combines our proven Visual AI with the latest GenAI and no-code approaches to
Apptoto
Scheduling
Apptoto's automated appointment reminders reduce no-shows, streamline scheduling, boost client satisfaction & grow
Arpari
Real estate and property
Multibank treasury management
authzed
AI tools
Authorization Infrastructure securing AI at OpenAI, Zoom, & more
BioRender
Collaboration
'Figma/Canva for scientists’
BrightMove
Recruiting
BrightMove pairs human recruiting expertise with AI that's built to augment your team, not replace it, so you find and hire the right
Canoe Software
Research and data providers
Discover Canoe Intelligence. Redefining alternative investments with automated document collection and data management.
Canto
Crypto and web3
Canto is the leading digital asset management solution for organizations
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read