attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Yembo
Insurance
Yembo turns a smartphone video of an interior into a 3D digital clone with semantic understanding, for property inspection in moving and
ZK Technology
zktecowfm.com
Descript
Media and content
Descript is the AI video and audio editor that makes editing as easy as editing
Lovable
Developer tools
Lovable is a Swedish vibe coding platform and company
Neon
Data platforms
The backend for apps and
Statsig
Developer tools
Statsig is your modern product development platform, with an integrated toolkit for experimentation, feature management, product analytics
AthenaHQ
Marketing
Be the Answer in AI Search - AI SEO across SEO, GEO & AEO
Paragon
Developer tools
The embedded integration platform for SaaS apps.
Driver
AI tools
Context for Codebases
Simplex
AI tools
AI agents to enroll providers with payors
Double
Finance and accounting
We make software for bookkeepers.
Teleport
Security
The Infrastructure Identity Company
Retell AI
AI tools
Supercharge Your Contact Center Operations with AI Phone Agents
Close
Sales tools
CRM and sales automation suite
Legora
AI tools
The agentic operating system for legal work
Mason
Logistics and supply chain
Mason is the fastest way to take smart devices from idea to end user
Doppler
Security
Secure secrets. Prevent breaches. Keep teams moving.
Glide
AI tools
Glide turns spreadsheets into beautiful, intelligent apps.
Langdock
AI tools
The all-in-one AI platform for companies.
Lively
Benefits and insurance
Modern employee benefits & health savings account (HSA) provider
Metal
Finance and accounting
The AI context platform for private capital. Everything your firm…
Stable
AI tools
A virtual address + mailbox for business
Atomic
AI tools
API that lets companies embed investment accounts into their services
Avo
Developer tools
Fixing data quality in product analytics.
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read