attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 1 Nov 2026
Neo4j
Data platforms
Neo4j is a graph database management system developed by Neo4j
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
Veracode
Security
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven
iCIMS
Recruiting
The iCIMS Talent Cloud is a cloud-based talent acquisition platform that helps organizations to attract, engage, and hire the best
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Bonterra
Nonprofit and fundraising
Social good software for nonprofits, corporations, public agencies, and
Chainalysis
Government and public sector
Chainalysis combines blockchain data and AI to help government agencies, crypto businesses, and financial institutions engage confidently
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
Keyfactor
DevOps and observability
Keyfactor helps organizations secure machine identities, cryptography, and AI systems with trust infrastructure that enables digital trust
Marqeta
Finance and accounting
Transform your business with Marqeta's modern card issuing
VTEX
E-commerce
Modernize your stack and drive operational results with an AI-Native unified commerce
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Zello
Communications and CPaaS
Zello is what work sounds
Accesso
Developer tools
accesso provides revenue-driving virtual queuing technology and innovative point-of-sale and ticketing software to top attractions around
Basis Theory
Payments
More than a token vaultâBasis Theory routes, tokenizes, and optimizes your payments to drive conversion, resilience, and
CircleCo
Collaboration
Build a home for your community, events, and courses — all under your own
Eightfold AI
Research and data providers
Eightfold is the agentic talent intelligence company that gives HR leaders the intelligence to see, develop, and deploy the depth of talent
Ellucian Company L.P
Education
Flexible campus technology solutions to boost agility & efficiency, enabling deeper engagement, smarter insights & better outcomes for your
ExtraHop Networks
Security
Explore cutting-edge technology solutions for your business
Gigs
HR and HRIS
The OS for Embedded Telecom
LexisNexis Risk Solutions
lexisnexis.com
Magnet Forensics
Security
Founded in 2010, Magnet Forensics is a developer of digital investigation solutions that acquire, analyze, report on, and manage evidence
Mark43
Government and public sector
Mark43’s product suite is a commercial-of-the-shelf (COTS) cloud-native Software-as-a-Service (SaaS) platform that provides modern CAD and
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read