What is a SOC2 report
A SOC2 (System and Organization Controls) report assesses a service organisation’s control environment.
Type 1 vs Type 2 report
A Type 1 SOC2 report evaluates the design of controls at a specific point in time. A Type 2 SOC2 report assesses both the design and operating effectiveness of controls over a defined period, typically 12 months.