attestation
SOC 2 evidence across 21 vendors
SOC 2 is an attestation report, not a certification. A CPA firm examines controls against the AICPA trust services criteria and issues a restricted-use report for a period. CertReports indexes what is public: the report type, period and auditor where the vendor or a registry states them, plus the CSA STAR Level 2 attestations built on SOC 2 examinations.
- Verified rows
- 21
- Vendor-stated
- 744
- Expired
- 0
- Last verified
- 2 Nov 2026
iManage
Legal tech
iManage was founded in 1995 and initially merged with Interwoven in
Wrike
Project management
Wrike is a work management platform that delivers real-time project and task insight to its
Everlaw
Legal tech
Transform your approach to litigation and
Panopto
Education
At Panopto, we believe that video can have a transformative effect on
Sauce Labs
Developer tools
What is Sauce Labs? Sauce Labs makes software work for everyone, when they want it
Halo
No-code and automation
Streamline your processes with Halo's workflow
Revinate
Travel and hospitality
We power 950 million+ guest profiles and $17.2 billion in direct revenue for over 12,500 hotels
Altana
altana.ai
Contrast Security
Security
Secure AI-generated code with
Kentik Technologies
DevOps and observability
Kentik is the network intelligence platform for modern infrastructure
Lightspeed POS
E-commerce
Lightspeed Commerce is a point-of-sale and e-commerce software provider based in Montreal, Quebec, Canada
Moodle
moodle.com
Simetrik
Finance and accounting
No code enterprise SaaS for financial control automation.
Contentful
Developer tools
Contentful is a German-American headless content management system (CMS), founded in 2013 in Berlin, Germany, by Sascha Konietzke and Paolo
Pendo
Analytics
Pendo feeds product context to the apps and AI agents you build or buy, so you can understand your users, act where it counts, and drive
CircleCo
Collaboration
Build a home for your community, events, and courses — all under your own
Ellucian Company L.P
Education
Flexible campus technology solutions to boost agility & efficiency, enabling deeper engagement, smarter insights & better outcomes for your
Gigs
HR and HRIS
The OS for Embedded Telecom
OneLogin by One Identity
oneidentity.com
Anthropic
AI infrastructure
Anthropic, PBC is an American artificial intelligence (AI) public benefit corporation headquartered in San Francisco, California
ElevenLabs
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Type I versus Type II
A Type I report describes controls at a point in time. A Type II report tests them over a period, commonly six to twelve months. Most buyers ask for Type II covering the last twelve months, or an older report with a bridge letter of at most three months.
Why nobody is "SOC 2 certified"
The AICPA issues no certificate and keeps no registry of audited organisations. A vendor that says "SOC 2 certified" usually means it has a report; CertReports records the report claim and flags the terminology.
How to get the report
SOC 2 reports are shared under NDA through the vendor trust centre. CertReports links to the request flow and never hosts, caches or summarises the report beyond facts the vendor has already published.
Guides on SOC 2
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read
What Is NIS2? Mapping Its Vendor Rules to Real Evidence
Solomon Amos · 21 Oct 2026 · 9 min read