attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Tolmo
Security
Tolmo is the AI security platform that secures every layer of cloud…
Prox
Customer support
Prox turns product knowledge into AI agents that help customers and teams get answers fast.
Zeal
Finance and accounting
Modern payroll for modern work
Abacum
Finance and accounting
The AI-native FP&A platform that helps Finance teams drive business…
AiPrise
Compliance and GRC
AI-powered Global Compliance Platform
Albiware
Real estate and property
B2B SaaS for insurance damage repair contractors.
Allus AI
AI tools
Transforming manufacturing with our next-gen Vision Foundation Model
Ambral
Sales tools
AI for account management and customer success
Anima App
Developer tools
Anima - Design Agent | AgentGrid.io - Shared drive for humans & agents
Aragorn AI
HR and HRIS
Operating system for HR in the AI era
Artie
Data platforms
Software that streams data from databases to warehouses in real-time
Café
HR and HRIS
Your Workplace Engagement Hub
Avoca
Sales tools
AI-powered Sales Agent for Service-Based Industries
BootLoop
Design tools
Firmware in minutes, not months - rigorously tested on real hardware
BotCity
Developer tools
Observability and Governance for AI-Generated Python scripts.
BrainHi
AI tools
Automated receptionist that answers missed calls for local businesses
Cerebrium
AI tools
Serverless Infrastructure Platform for AI
Chatwoot
Customer support
The modern, open source, self-hosted AI customer support platform
Supabase
Developer tools
Build in a weekend. Scale to millions.
Bretton AI
AI tools
AI-native operations for the banks
CoLoop
Research and data providers
AI Copilot for insights & strategy
Complif
Compliance and GRC
Compliance tools & AI agents for financial entities
Complir
E-commerce
Vanta for physical products
Conveo
AI assistants
Growth through always‑on consumer understanding
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read