attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Curri
Real estate and property
Construction & industrial logistics platform.
Dagger
Developer tools
Develop your CI/CD pipelines as code and run them anywhere
Dailybot
AI tools
Make all team work visible — people and AI agents
Dashworks
Productivity
Your team's intelligent start page.
Datafold
Data platforms
Automating manual and repetitive data engineering tasks with AI
Datasaur
Compliance and GRC
Datasaur builds private AI/agents for enterprise/government
Deepnote
AI tools
A better data science notebook.
DeepSource
AI tools
Unified DevSecOps platform, helping developers ship good code.
DemandSphere
Marketing
SEO & Content Marketing Intelligence
Antrepriz Solutions Pvt
Finance and accounting
Manage all your corporate spending with dice and make daily business operations fast and
DiligenceSquared
AI tools
AI-powered market due diligence for investment decisions
Dime
Healthcare
Dime automates administrative busywork at healthcare clinics
Disclo
HR and HRIS
Health disclosure and accommodation management platform
DrDroid
Developer tools
Your best friend in production.
Activehours
Finance and accounting
EarnIn is an app that gives you access to the pay you've earned - when you want
Easol
E-commerce
Shopify for experiences
Ekho
Procurement
Shopify for vehicles
Encord
AI tools
The data layer for physical AI
Epsilon3
AI tools
AI-Powered ERP, MES, and Test Software for Complex Operations
Feroot Security
Compliance and GRC
AI-powered Compliance Platform for PCI 4, CCPA, HIPAA, CIPA, 50+ laws
Formance
Developer tools
Open Source Infrastructure for the Financial Internet
FurtherAI
Insurance
AI Workforce for the Insurance Industry
Lago
Finance and accounting
The AI Native Billing Platform
Lilac
AI tools
Lilac turns any GPU cluster into a reliable AI factory: nodes proven before they bill, watched around the clock, metered to settle an
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read