SOC 3 is a general-use report based on the same audit as SOC 2, but prepared for public distribution. It gives a high-level view of the controls posture without exposing the sensitive detail contained in the SOC 2 report.
Meant for public distribution, no NDA required.
Summarizes the controls posture without the sensitive detail of SOC 2.
Handy to share with customers, leadership or procurement.
Both stem from the same audit against the Trust Services Criteria. The difference is the level of detail and distribution:
Request it and we’ll send it over so you can share it with your stakeholders.