Create an account

Connect an AWS account and start collecting SOC 2 evidence.

Company or teamEmail

Which reports do you need?SOC 2Security, availability and confidentiality of your system. What most SaaS customers ask for.SOC 1Controls over financial reporting — needed when your customers' auditors rely on your system for their financial statements. We automate the IT General Controls it tests; business-process controls (revenue recognition, billing accuracy) still need your auditor.

Pick both if you need both.

Type I or Type II?SOC 2 Type IIControls operated effectively over 3–12 months. Needs collection running continuously across that window.SOC 2 Type IControls suitably designed at a single point in time. A current clean run is the evidence.

Applies to whichever reports you picked above — SOC 1 and SOC 2 both come in Type I and Type II. You can change this later.

Password

At least 12 characters. Length matters more than symbols.

Already have an account? Sign in.