Skip to main content

attestation

SOC 2 evidence across 765 vendors

SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.

Verified rows
21
Vendor-stated
744
Expired
0
Last verified
2 Nov 2026
RecruitiFi logo

RecruitiFi

Developer tools

One platform for the extended workforce: permanent, contingent, and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
3 stated2 Nov 2026
Rootly logo

Rootly

Developer tools

AI-native on-call and incident response carefully crafted to help…

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
3 stated2 Nov 2026
Salesmsg logo

Salesmsg

Marketing

Business texting and calling platform for sales, marketing, and support

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
Sendoso logo

Sendoso

No-code and automation

Automate personalized gifting campaigns to drive

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
3 stated2 Nov 2026
SEON Technologies logo

SEON Technologies

Security

SEON's fraud prevention platform unifies real-time detection and AML in one

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
5 stated2 Nov 2026
Gemshelf logo

Gemshelf

shelf.io

Eliminate bad data before it becomes the wrong

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
5 stated2 Nov 2026
Skedulo logo

Skedulo

Scheduling

Schedule and manage your deskless workforce, resolve conflicts, optimize travel, and more with our powerful scheduling app and mobile

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
4 stated2 Nov 2026
SmartBear Software logo

SmartBear Software

Developer tools

Maintain control as development

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
5 stated2 Nov 2026
SmartComms logo

SmartComms

smartcommunications.com

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
6 stated2 Nov 2026
Solidroad logo

Solidroad

Customer support

AI agents for CX teams, starting with training and QA.

SOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
Soroco Americas Private logo

Soroco Americas Private

soroco.com

Scout is the only platform that observes humans and agents operating together, then simulates the consequences of any workflow change on

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCyber Essentials mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
4 stated2 Nov 2026
Split logo

Split

Developer tools

Split.io feature flags connects critical impact data and alerts you whether your software changes are making things better or

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-stated
7 stated2 Nov 2026
spoileralert logo

spoileralert

spoileralert.com

Discount short-dated and obsolete inventory leveraging the CPG industry’s only purpose-built sales platform for digitizing discounting

SOC 2 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
1 stated2 Nov 2026
Submittable logo

Submittable

Nonprofit and fundraising

The best way to launch, manage and measure social impact programs

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
4 stated2 Nov 2026
Supered logo

Supered

Sales tools

Supered turns the sales process you wrote into the standard every rep actually runs, inside HubSpot and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
Superhuman Labs logo

Superhuman Labs

Productivity

Superhuman is the AI productivity suite that gives you superpowers everywhere you

SOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
5 stated2 Nov 2026
Syncron logo

Syncron

syncron.com

Enhance spare parts availability and profitability with Syncron's solutions, driving growth and customer satisfaction in aftermarket

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
7 stated2 Nov 2026
Mobi Systems logo

Mobi Systems

Research and data providers

Born from MIT research and designed for mission-critical use, Mobi offers AI solutions that help you reduce complexity, unlock growth, and

SOC 2 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
1 stated2 Nov 2026
Taskworld logo

Taskworld

Collaboration

Taskworld is a cloud-based collaboration platform created by Fred Mouawad

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
Team Engine logo

Team Engine

Recruiting

Simplify recruitment, retention, and engagement with Team Engine's AI-powered automation for communication with your field

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
UserGems logo

UserGems

Sales tools

The AI Command Center for outbound and ABM

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
3 stated2 Nov 2026
Workshop Software logo

Workshop Software

useworkshop.com

Workshop is the best internal communications email software to create, send, & measure branded internal comms & employee

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
5 stated2 Nov 2026
Whimsical logo

Whimsical

Design tools

Design and document implementation with

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredCCPA mark, CertReports state Vendor-stated
3 stated2 Nov 2026
XOi Technologies logo

XOi Technologies

xoi.io

XOi captures field data, enriches it with AI, and connects it to your systems so every asset tells a complete

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026

Type I versus Type II

A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.

Why nobody is "SOC 2 certified"

The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.

How to get the report

SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.

All articles