SOC 2

SOC 1 and SOC 2 are voluntary auditing standards created by the American Institute of Certified Public Accountants (AICPA) to provide third-party assurance about a service organization’s internal controls. The main difference is their focus: SOC 1 evaluates controls that affect a client’s financial reporting, while SOC 2 evaluates controls related to data security and privacy.