attestation
SOC 2 evidence across 765 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
Arista Networks
Cloud and hosting
Arista Networks is an industry leader in data-driven, client to cloud networking for large data center, campus and routing
Asato
IT management
Asato is an asset optimization platform designed to help CIOs manage and optimize all their IT
Attentive Mobile
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Beefree
Marketing
Power better email creation with Beefree, the technology behind RGE Studio for marketing teams and Beefree SDK for developers building
Projector PSA
Business services
Project portfolio management, resourcing and finance management in a single professional services software, built to boost profitability
Bluecore
Marketing
Turn your untapped retail data into one-to-one campaigns that make an immediate impact on revenue with
BridgeAthletic
Education
BridgeAthletic offers world-class software for coaches and personal trainers to deliver custom training programs and track athlete
Canary Technologies
Travel and hospitality
Modernizing the hospitality tech stack.
Casepoint
Government and public sector
Discover Casepointâs secure, unified AI-powered platform for government, legal, and compliance work, including eDiscovery, legal hold
Elmhurst Financial Services
Payments
Celero offers high-tech, customizable payment solutions and dedicated support to help businesses
CentralReach
Healthcare
ABA and Multidisciplinary Software Solutions for Autism & IDD
Veracross
Education
Eliminate data chaos with the leading student information system for private & independent K-12
Snyk
Security
Every AI-building team faces one question: can you trust what you're shipping? Snyk secures the code AI writes, the agents it runs, and the
Perplexity
AI assistants
Perplexity AI, Inc., or simply Perplexity, is an American privately held software company offering a web search engine that processes user
CoLab
Collaboration
Human and AI design review for hardware
Exterro
Legal tech
Turn data risk into confidence with Exterro's AI-driven platform for eDiscovery, digital forensics, data privacy, security &
Scale AI
AI infrastructure
Data-centric infrastructure to accelerate the development of AI
Magenta
Manufacturing and industrial
Magenta is the agent platform that automates complex manufacturing
Axonius Federal Systems
axoniusfed.com
CirrusMD
Logistics and supply chain
See how CirrusMD is reimagining the Point of Care in a new physician-first care and guidance delivery
DataRobot
AI infrastructure
DataRobot delivers the industry-leading AI applications and platform that maximize impact and minimize risk for your
H2O.AI for Government
AI infrastructure
Only H2O.ai provides an end-to-end GenAI platform where you own every part of the
Incode Technologies
Government and public sector
Identity verification software that checks documents, biometrics, and government records in one
Judi Health
Benefits and insurance
Judi Rx delivers transparent, member-focused PBM solutions, while Judi Care provides medical, vision, and dental benefits through Judi®
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read