Menu
Auditors
Our picks by fit, each with a passed peer review
Every listed firm, filterable by price and timeline
Consultants
Readiness, pentest, vCISO, and ISO 27001 firms in one list
Software
Every platform we profile, with sourced prices and fit
Our picks by buyer fit, with the tradeoffs
Published prices, add-ons, and audit fees
Learn
Articles on cost, controls, timelines, and auditor choice
Free Tools
A few questions, then your best-fit auditors
Fit-ranked platforms with observed price bands
Knowledge base·138 articles
The SOC 2 library, organized by the decision in front of you. Pick a task to jump to its guides, or start from one of the essential reads below.
The library holds 138 articles on getting a SOC 2 report: what the Trust Services Criteria require, how to prepare, what audits and compliance software cost, and how to choose an auditor.
Free SOC 2 controls list: an example control for each of the 61 criteria, with evidence and a common gap. Download Excel, PDF or CSV, no signup.
Read insight →The five SOC 2 Trust Services Criteria categories, the 61 criteria behind them (CC1–CC9, A1, PI1, C1, P1–P8), and which categories your report needs.
Read insight →Compare the best SOC 2 compliance software by buyer fit, sourced pricing, tradeoffs, and audit handoff for startups, multi-framework teams, and enterprises.
Read insight →Budget year two of a SOC 2 Type 2: what recurs, what drops away, how 3, 6, and 12-month observation periods change the calendar, and how to negotiate renewal.
Read insight →SOC 2 is a CPA report on your system. ISO 27001 certifies your management system. See what buyers ask for, what carries over, and how to quote both.
Read insight →AICPA's September 2026 guidance on AI in SOC 2, and how scope, controls, and evidence apply to AI products and to companies that use AI tools.
Read insight →