Skip to content

Assurance · supported

SOC2

AICPA Trust Services Criteria for service organisations, run from the same evidence as your ISO 27001 controls.

Start free trialAll standards

TRUST SERVICES CRITERIA ACROSS SECURITY, AVAILABILITY, PROCESSING INTEGRITY, CONFIDENTIALITY AND PRIVACY; THE REPORT IS ISSUED BY A CPA FIRM.

Who needs it

Who gets asked.

Typical driver: US enterprise customers.

Software businesses selling into the US or to customers who ask for a SOC2 report

On ISO Assist

How we run SOC2.

  1. 01

    Criteria appear as mapped requirements; evidence you already hold for 27001 is credited automatically.

  2. 02

    Gaps unique to SOC2 are listed plainly so you can decide whether the report is worth pursuing.

Sectors

Where SOC2 comes up.

Software & SaaS

ISO 27001 first, SOC2 mapped from the same evidence.

Worked example

Reading

From the blog.

CYBER SECURITY · 10 AUGUST 2026

ISO 27001 when you run on Google Workspace, not a cloud-native stack

CYBER SECURITY · 3 AUGUST 2026

Cyber hygiene for Australian SMBs in 2026: the eight things that still matter

See SOC2 adopted in the demo.

14 days free, no card. Or book a demo and we will walk it with you.

Start free trialBook a demo