Understanding the Differences Between a Vendor SOC 1, 2, 3

To verify your vendor has adequate internal controls in place to protect your data, you must request and assess their SOC reports.

It can get confusing what each SOC report covers and what each report means. To help guide you and your team in understanding what those differences are, we've created a simple one-page infographic.

Download the infographic to learn:

• What the SSAE 18 and SSAE 20 are
• Definitions of each vendor SOC report and when to use them
• How each SOC report benefits your organization