SOC 2

SOC 2 (Service Organization Control 2) is an audit framework developed by the AICPA that evaluates a provider's controls in terms of security, availability, integrity, confidentiality and privacy. An independent auditor issues a report, where Type I looks at a point in time and Type II at a period. Unlike ISO 27001, SOC 2 is an audit report, not a certificate, and is especially established in the US market. For SaaS and IT providers with international customers it's increasingly required.

For providers with international or US customers, the SOC 2 report is often a prerequisite just to make the shortlist. The report is extensive, and customers ask many detailed questions on top of it that repeat across requests. Whoever delivers the report and answers fast and consistently comes across as professional in international business. Whoever has to laboriously assemble everything first loses in the competition for global customers.

With Tendry you keep your SOC 2 report and the associated answers central and retrievable. So you handle international security requests quickly and uniformly too.