Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Veracross
SOC 2 evidence
Eliminate data chaos with the leading student information system for private & independent K-12
Vendor-statedVeracross and SOC 2
Veracross states it holds a SOC 2 Type II report. CertReports captured this on 21 Sep 2026 from its trust centre (Vanta); it is a vendor statement, not an independent confirmation.
Evidence
Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 2026 · confidence 90%- Kind
- Type II
ExpiredEvidenced by the public SOC 3 report for the same examination period
as of 2 Nov 2026 · confidence 90%- Kind
- Type II
- Period
- 1 Jun 2024 to 30 Nov 2024
- Criteria
- Security
- Scope
- Veracross Educational Software Services System
| Source | Captured | Quote | Links |
|---|---|---|---|
Veracross SOC 3 report (trust.veracross.com) Auditor or certification body · HTTP 200 | 26 Oct 2026 | In our opinion, management's assertion that the controls within Veracross' Educational Software Services System were suitably designed and operating effectively throughout the period June 1, 2024 to November 30, 2024, to provide reasonable assurance that Veracross' service commitments and system requirements were achieved based on the applicable trust services criteria is fairly stated, in all material respects , if complementary subservice organization controls and complementary user entity controls assumed in the design of Veracross' controls operated effectively throughout that period. |
ExpiredPublic SOC 3 report on the vendor's trust centre
as of 2 Nov 2026 · confidence 95%- Kind
- Type II
- Period
- 1 Jun 2024 to 30 Nov 2024
- Criteria
- Security
- Scope
- Veracross Educational Software Services System
| Source | Captured | Quote | Links |
|---|---|---|---|
Veracross SOC 3 report (trust.veracross.com) Auditor or certification body · HTTP 200 | 26 Oct 2026 | In our opinion, management's assertion that the controls within Veracross' Educational Software Services System were suitably designed and operating effectively throughout the period June 1, 2024 to November 30, 2024, to provide reasonable assurance that Veracross' service commitments and system requirements were achieved based on the applicable trust services criteria is fairly stated, in all material respects , if complementary subservice organization controls and complementary user entity controls assumed in the design of Veracross' controls operated effectively throughout that period. |
What is not public
- The report period is not public, so CertReports cannot say whether the Veracross SOC 2 report covers the last 12 months.
- The audit firm is not stated in any public source CertReports has captured.
- Trust services criteria in scope, carve-outs and bridge-letter status are only in the restricted-use report, which CertReports never hosts.
What SOC 2 means, and what it does not
SOC 2 reports are restricted-use and are never "certifications". A Type II report covers a period; freshness is the period end plus a bridge letter of at most three months. "SOC 2 ready" and "in progress" are not reports. No public SOC 2 registry exists; the strongest registry-grade signal is a CSA STAR Level 2 attestation, then a public SOC 3.
Read the SOC 2 guide and browse all vendors with evidenceQuestions buyers ask
Is Veracross SOC 2 certified?
No organisation is "SOC 2 certified": SOC 2 is an attestation report issued by a CPA firm, not a certification. Veracross states it holds a SOC 2 Type II report as of 21 Sep 2026.
How do I get the Veracross SOC 2 report?
SOC 2 reports are restricted-use documents shared under NDA. Request it through the Veracross trust centre or security page; CertReports links to it and never hosts the report.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: Accusoft PrizmdocAccusoft Prizmdoc appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: BluesnapBluesnap appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: CloudinaryCloudinary appeared on the subprocessor list.
Alternatives with SOC 2 evidence
Similar vendors (shared product tags or the Education category) whose SOC 2 row is verified or vendor-stated, ranked by similarity.
Edpuzzle
Education
Easily create beautiful interactive video lessons for your students you can integrate right into your
Magic School
Education
Transform teaching and learning with an AI platform built for school
ClassDojo
Education
Communication app for K-8 teachers, kids, and families
Docebo
Education
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
EC
Ellucian Company L.P
Education
Flexible campus technology solutions to boost agility & efficiency, enabling deeper engagement, smarter insights & better outcomes for your
Digication
Education
AI-powered platform giving institutions the assessment data, accreditation evidence, and student retention signals needed to make learning
Perusall
Education
Discover Perusall — the interactive social learning platform where every student is prepared for every
