attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
HYDROLIX
Data platforms
Hydrolix is the real-time data platform for internet-scale
Twine Labs
HR and HRIS
CPOHQ is the #1 platform for 3,000+ Chief People Officers: a private CPO community, an AI Chief of Staff, and AI agents for the people
Kubit
Analytics
Optimize Agent Actions with User
Kurtosys Systems
Finance and accounting
Digital and reporting solutions for investment
Kyloe Partners
Business services
Learn how you can get the most out of
Leadership Connect
Research and data providers
Access verified government contact data, org charts, legislative tracking, and contracting intelligence in one powerful platform |
Mighty Software
mightynetworks.com
Our Hosts earned $500M in
Modo Labs
Collaboration
Modo unifies digital life across campus and workplace—on mobile or desktop—with the leading campus experience app and workplace experience
NetScout Systems
DevOps and observability
Drive observability, cybersecurity, DDoS protection, and AIOps initiatives with NETSCOUT's AI-ready data
Newforma
newforma.com
Newforma centralizes your files, emails, and conversations into one connected information management platform for full AEC project
Lasso Technologies
onelasso.com
Onfleet
Logistics and supply chain
Optimize your dispatch and effortlessly manage your routes with Onfleet, the #1 last-mile delivery software for couriers and delivery
PartnerStack
Sales tools
PartnerStack is a full stack solution for partnerships.
Passpack
Identity and access
The Password Manager for Your Business Enterprise-grade security without the complexity or cost of traditional enterprise
Permutive
Marketing
Rebuilding data in advertising to protect privacy
Personable
Productivity
Personable Inc. develops ScanWriter - award winning financial investigation software. ScanWriter digitizes, centralizes, organizes, and analyzes data from financial documents like
Perusall
Education
Discover Perusall — the interactive social learning platform where every student is prepared for every
Phunware
Travel and hospitality
Transform guest experiences and hotel operations with
QLess
Scheduling
QLess streamlines queues, reduces wait times, and enhances customer experiences with smart queue management
Qooper Mentoring Software
Automotive and mobility
Qooper helps enterprises scale mentoring programs to improve retention, leadership development, and internal
Quantexa
quantexa.com
Connect fragmented data to reveal real-world relationships so humans and AI can make trusted decisions at
Qumulo
Cloud storage
Store, manage, and simplify all your unstructured data and hybrid workflows in one platform, anywhere - at the edge, in the core, or in any
RainFocus
rainfocus.com
Discover RainFocus, the premier event management software designed to accelerate growth and
Reclaim.ai
Scheduling
Reclaim is an AI-powered app that creates 40% more time for teams — auto-schedule tasks, habits, meeting & breaks – free on Google Calendar
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read