Glossary · Security and compliance
SOC 2
Also called SOC 2 Type II, SOC 2 Type 2, SOC2
Definition
SOC 2 is an audit framework from the AICPA in which an independent auditor reports on a service provider's controls for security, availability, confidentiality and related areas. A Type II report tests that the controls worked over a period, usually six to twelve months, which makes it stronger than a Type I.
Where SOC 2 comes up
On this site, in our guides and in the conversations we've written up.
Guide How to choose a virtual data room Security and compliance: certifications (ISO 27001, SOC 2), encryption, data residency, and granular permissions. Guide Virtual data room security: what to look for Look for independent, audited certifications rather than self-assessed claims: ISO 27001 (information security management), SOC 2 Type II (operational controls over time), and where relevant ISO 27017/27701, SOC 3, HIPAA and GDPR alignment. Guide iDeals VDR review: easy to use, secure and quick to set up iDeals also complies with the major standards, including GDPR and SOC 2, and holds several ISO certifications. Guide Ansarada VDR review: the whole deal in one place, if you need it all Ansarada has ISO 27001 certification and SOC 2 attestation, alongside multi-factor authentication, dynamic watermarking and detailed access controls. 
Video · VirtualData-Room.com Ansarada review: the whole deal, with AI that reads your bidders ISO 27001 certification, SOC 2 attestation, watermarking and folder and document permissions
Remote Doc Destruct revokes access to documents even after download
AIDA answers questions about the data room; AI Predict estimates bidder… 
Video · VirtualData-Room.com iDeals review: as good as its name? iDeals also complies with the major standards, including GDPR and SOC 2, with multiple ISO certifications there to show you that it's a secure platform.
Video · VirtualData-Room.com Ansarada review: the whole deal, with AI that reads your bidders ISO 27001 certification, SOC 2 attestation, watermarking and folder and document permissions
Remote Doc Destruct revokes access to documents even after download
AIDA answers questions about the data room; AI Predict estimates bidder… Video · VirtualData-Room.com iDeals review: as good as its name? iDeals also complies with the major standards, including GDPR and SOC 2, with multiple ISO certifications there to show you that it's a secure platform. Related terms
ISO 27001 The international standard for information security management, certified by independent auditors. Data residency Where a provider physically stores your data, which can matter for regulation and client requirements. GDPR The EU's data protection law, which governs how personal data, including data in a data room, is handled. Single sign-on Logging in with a company account, such as Microsoft or Okta, instead of a separate password. Two-factor authentication A login that needs a second proof of identity, such as a code on a phone, on top of a password.