attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
PathPilot
Finance and accounting
AI Agents for Lending Operations
Socratix AI
Compliance and GRC
AI coworkers for fraud and compliance teams.
G LNK
Healthcare
Simplifying Collaboration for Healthcare Organizations & Professionals
Go1
HR and HRIS
A learning platform that enables you to train your staff or customers.
Gridware
Manufacturing and industrial
Protecting the grid today, preparing the grid for tomorrow
GrowthBook
Developer tools
Open source feature flagging and A/B testing
Hadrius
Compliance and GRC
Automating Securities Compliance
Hey Revia
Healthcare
Voice AI to automate complex phone calls for healthcare providers
HockeyStack
Marketing
The operating system for inbound B2B revenue
Humaans
HR and HRIS
AI-Powered HRIS for high performing teams
Human Interest
HR and HRIS
The 401(k) for small and medium-sized businesses.
Humanloop
AI tools
Humanloop is the LLM evals platform for enterprises.
Humi
HR and HRIS
Payroll, HR, and Health Benefits for Canada's SMB's
IcePanel
Developer tools
Design and explain complex software architecture.
inFeedo AI
HR and HRIS
AI to engage employees, predict attrition and automate HR/IT support
Infisical
Developer tools
Security infrastructure for developers and agents
Infracost
Developer tools
Shift FinOps Left: Proactively Find & Fix Cloud Cost Issues
Instrumentl
Nonprofit and fundraising
Instrumentl automates grant discovery and management for nonprofits.
Interfere
Developer tools
Give engineering, product, and design teams insight into unseen issues
Invofox
Finance and accounting
Invofox is the document parsing and data extraction API for software…
jawnt
Logistics and supply chain
Jawnt's modern transportation platform makes it easy for organizations to offer comprehensive commuter benefits that employees and admins
Carma
No-code and automation
The agentic workspace that runs construction operations for profit
Deed
HR and HRIS
Making it easy for employees to donate and volunteer with good causes.
Kombo
Recruiting
Unified API for HR, payroll and recruiting software
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read