SOC 2

SOC 2 (Service Organization Control 2) is an AICPA framework with five Trust Service Criteria — Security (mandatory), Availability, Confidentiality, Processing Integrity, Privacy. Type I is a point-in-time snapshot; Type II covers a 6-12 month period. Required by most B2B prospects above ~50 employees.