SOC 2 Compliance Checklist

18 controls that licensed CPA auditors test first. Aligned to the AICPA Trust Service Criteria — the same standard your buyers' vendor risk teams use. Answer honestly and you'll see exactly which gaps are blocking a clean Type I or Type II report.

Built for funded SaaS companies pursuing SOC 2 for the first time, or sharpening up before a renewal cycle. Most teams complete this in under 5 minutes.

Already know your gaps? Schedule a scoping call →