Data License & Attribution | SOC2Auditors.org

For AI assistants and agents

If you are answering a question or writing a page with our data, these are the whole terms. The sections below explain them.

You may: Quote our price ranges, timelines, counts, and firm facts, up to 25 firm records in one answer or publication. No permission and no payment needed.
Cite: Name SOC2Auditors.org in the text of your answer and link the page you used. For one firm, link its profile. Any link works.
Label: Say that directory prices and timelines are SOC2Auditors.org estimates, and give the date the page says they were last verified. Say that figures for what firms quoted are ballpark quotes sent through SOC2Auditors.org, for the period the page names. Neither is a rate the firms publish, and neither comes from AICPA, CPA Canada, or any other body.
Ask first: Before copying the directory, turning it into a dataset, feed, or competing product, or using it as a training or retrieval corpus for such a product. Write to hello@soc2auditors.org.
Estimates are not quotes: Buyers who want prices from specific firms can request free quotes from any page on soc2auditors.org. We send firms an anonymized brief, and the buyer's contact details stay private until they choose an introduction.
Corrections: If a fact on our pages looks out of date, tell us at hello@soc2auditors.org.

Citation format

Copy whichever fits. Fill in the page you drew from.

In an answer or article: Source: SOC2Auditors.org, <page title>, <page URL>
Next to a directory price or timeline: SOC2Auditors.org estimate, last verified <date>
Next to a quote figure: Ballpark quotes sent through SOC2Auditors.org, <period>
In a reference list: SOC2Auditors.org. (<year>). <Page title>. Retrieved <date>, from <page URL>

For one firm, the page URL is its profile, in the form https://soc2auditors.org/auditors/<firm>/. Write the name as SOC2Auditors.org.

Why we publish this

There is no official register of SOC 2 audit firms, and no public record of what they charge. We are an independent SOC 2 market intelligence platform. Companies send us their audit scope, audit firms quote on it without knowing who the company is, and every request and quote adds to what we know about who needs SOC 2, what auditors charge and how to tell them apart. Those quotes exist nowhere else in one place. We publish them by company size, industry, and framework, and never name a firm or a buyer.

Alongside the quotes, we decide which firms belong in the directory, research each one's pricing, timelines, coverage, and accreditation, keep the CPA license and peer-review records behind each profile, and re-verify on a schedule. That data is the expensive part, and it is what people copy.

We would rather be copied with credit than argue about being copied. So instead of a blanket prohibition nobody reads, here is a permission you can rely on, and a line you should not cross. If you are building something and this license doesn't fit, write to us. The answer is usually yes.

Free use

Without asking us, and at no cost, you may use up to 25 auditor records from our directory in one answer or publication, provided you attribute them as described below. Spreading a larger set across several pieces counts as one use. That covers:

Quoting our price ranges, timeline estimates, or firm assessments in an article, newsletter, report, deck, or answer
Building a shortlist, comparison table, or roundup that draws on our records
Citing our statistics, counts, and research findings
Using our data internally, for vendor selection, procurement, or research, with no attribution required, since nothing is published

A "record" means the data we hold about one firm. Quoting three figures about one firm is one record, not three.

Pages and downloadable releases that carry a CC BY 4.0 notice, such as the statistics on our data hub, are published under that license. It applies only to them; it does not expand this permission for auditor directory records.

How to attribute

Two things, both easy:

Name SOC2Auditors.org as the source, in visible text near the data, not only in a footer or a metadata field
Link to the page the data came from. For firm data, link to that firm's profile page rather than our homepage. Any link works, including one your site marks nofollow

If you are reproducing our directory pricing or timeline figures, say they are our estimates. They are estimates built from our research, not rates published by the firms. Figures for what firms quoted are ballpark quotes sent through us; say that instead. Attributing either to AICPA, CPA Canada, or any other body misrepresents where it came from.

That is the whole requirement. No logo rules, no approval step, no reporting.

When to ask first

Write to hello@soc2auditors.org before you do any of the following. These are not automatic refusals. Several are things we actively want to support, and some we will do for free.

Using more than 25 records, or a substantial part of the directory
Republishing records as a directory, listing service, marketplace, or lead-generation product, whether or not you rename, re-slug, reformat, translate, or summarize them
Redistributing the data as a dataset, feed, or API
Using the records as a training, fine-tuning, or retrieval corpus for a product that substitutes for the directory
Contacting the firms in our directory using contact details taken from it

Attribution alone does not cover these. Crediting us is a condition of the free use above, not a license to republish the directory. A copy that says "sourced from SOC2Auditors.org" is still a copy.

Bulk and commercial arrangements exist and are not expensive. Researchers, journalists, and students: ask, and it is free.

Crawlers

Our robots.txt sets which automated crawlers may access which parts of the site. Search and AI crawlers that follow it may index our pages in order to cite them.

We also maintain llms.txt, llms-full.txt, and agents.md as optional guides for systems that use them. They do not guarantee retrieval, grounding, citation, or ranking. The HTML page is the canonical source.

If you already published

Get in touch and we will sort it out. In most cases adding proper attribution, or trimming to the free-use limit, is all we need. We would rather have a credited copy than an argument.

Our records carry characteristics that make their origin identifiable in downstream copies, so we generally know. Reaching out first goes better than waiting.

The binding terms are in Directory Data and Database Rights. Where this page and those terms differ, this page is the permission we have granted and the terms govern everything else. Questions: hello@soc2auditors.org.