SOC 2 (System and Organization Controls)

An audit framework developed by the AICPA that evaluates security, availability, integrity, and confidentiality controls of a service provider. The SOC 2 Type II report is often required by American clients or SaaS companies to prove security posture maturity. It complements ISO 27001 in the international market.