attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
LanceDB
AI tools
Open-source, serverless vectordb for production-scale generative AI
Lantern AI
AI tools
Turn Your Taste Into Hires
Leena AI
AI tools
We at Leena AI build a virtual assistant that answers employee's…
Lingo.dev
AI tools
The Localization Engineering Platform
LiveFlow
Finance and accounting
The Unified AI-ERP & FP&A Platform
Magic Patterns
Design tools
Go from idea to production with AI.
Medplum
Developer tools
API first electronic health record (EHR) that is open source
Mem0
Developer tools
The Memory layer for AI Agents
Method Financial
Payments
Financial connectivity API for consumer liabilities
Meticulous
Developer tools
Automated e2e screenshot testing without writing or maintaining tests
MindsDB
AI tools
Connect, Unify, Respond to any data, anywhere with human-level…
Model ML
Finance and accounting
The AI for Financial Services.
ModernLoop
Productivity
ModernLoop helps teams automate and streamline recruiting operations
Modern Treasury
Finance and accounting
Payment operations tools for money movement.
Navattic
AI assistants
Interactive product demos
Neosync
Developer tools
Neosync is an open-source anonymization and synthetic data platform.
NimbleRx
Healthcare
On-demand prescription delivery.
Nowadays
AI tools
AI-native platform for corporate meetings and events
Openlayer
AI tools
The fastest way to ship airtight AI
Opennote
Productivity
The notebook that thinks with you.
Openroll
AI tools
The AI workforce for People and Finance teams
Optery
Security
Opt out software that removes your private info from the internet
OutRival
AI tools
Outbound AI Agents for Education, Insurance, and Travel
Parahelp
AI assistants
Build an AI support agent that securely uses all your tools
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read