What is SOC 2?

The SOC framework comes from the AICPA and covers how a company handles customer data, the controls it uses and the processes behind them. A report can be point in time, looking at control design, or it can add an operating period that shows the controls running in practice. Aura describes itself as ISO 27001 certified and SOC 2 Type II third-party audited. Abine, Inc. holds an AICPA SOC report, and 1Password is certified under the same framework while publishing outside audit findings. Acronis and Acronis Cyber Protect list SOC among ISO/IEC 27000 series, ISO 9001 and SOC 2.