attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
MacStadium
Cloud and hosting
As the industry-leading Mac private cloud and software-as-a-service provider enabling macOS workloads, MacStadium has been solely focused
Maxio LCC
Finance and accounting
Maxio is the all-in-one billing and financial reporting platform trusted by over 2,000 SaaS, AI, and subscription
PARTECH
Scheduling
Modern restaurant tech that unifies POS, management tools, & scheduling software—helping restaurants streamline operations, cut chaos, and
PayQuicker
payquicker.com
Reveal Data
AI tools
Reveal provides world-class document review technology, underpinned by leading processing, visual analytics, and artificial intelligence
Securiti
Compliance and GRC
AI Powered Security, PrivacyOps, Governance and Compliance for Multicloud, SaaS and Self Managed Data Systems &
Seismic Software
Sales tools
Seismic Software is a global leader in AI-powered sales enablement, providing a unified enablement platform that equips customer-facing
Sertifi
E-signature
Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract
Sybill
Sales tools
Sybill is the AI revenue intelligence platform trusted by 750+ revenue teams to turn every customer conversation into CRM data
Syndio Solutions
HR and HRIS
Truly equitable workplaces get two things right: fair pay and equal access to
Gong
Sales tools
Gong Revenue AI OS helps your entire GTM organization
monday.com
Project management
Monday.com Ltd. is an Israeli software company based in Tel Aviv
Navan
Travel and hospitality
Streamline your corporate travel management and expense processes in one
Sentry
DevOps and observability
Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning
Zoom
Collaboration
Modernize workflows with Zoom's trusted collaboration tools: including video meetings, Zoom Chat, VoIP phone, webinars, whiteboard, contact
Vercel
Cloud and hosting
The autonomous stack for every app and
Fortinet
IoT and devices
Fortinet delivers award-winning cyber security solutions across the entire digital attack surface, securing devices, data, and
Bird
Communications and CPaaS
The world’s largest omnichannel communications platform
Otter.ai
AI assistants
Otter AI Meeting Agent supports real-time transcription, live chat, automated summaries, insights, and action
Miro
Collaboration
Speed up product development from ideation to
Railway
Cloud and hosting
Railway is a full-stack cloud for deploying web apps, servers, databases, and more with automatic scaling, monitoring, and
RingCentral
Communications and CPaaS
Power the voice of your business with RingCentral Agentic Voice AI, including AI Receptionist (AIR), AI Virtual Assistant (AVA), & AI
Palo Alto Networks
Identity and access
Protect your organization with
y
DevOps and observability
AI agents powering financial infrastructure for merchants, banks, and
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read