SOC 2

SOC 2 is an auditing standard developed by the AICPA that evaluates an organization's controls related to security, availability, processing integrity, confidentiality, and privacy. SaaS companies and service providers commonly pursue SOC 2 reports to prove to customers that they handle data responsibly. Type I reports assess control design; Type II reports assess operating effectiveness over time.

Definición editorial de DecipherU. Para definiciones técnicas autorizadas, consulta NIST, ISO, o el organismo de normalización correspondiente.