Attestation report

SOC 2

Trust, reported.

The security report US customers ask for. Genroks prepares your controls and evidence, and coordinates the audit with a licensed CPA firm.

  • 5

    Trust Services Criteria

  • Type I and II

    a point in time, or a period

  • 3 to 12

    months of observation for Type II

  • Yearly

    renewal of your report

Selling to US companies? Their security team will ask for your SOC 2 report. Genroks gets you audit-ready, and keeps the evidence flowing through the whole observation period.

What it asks for

Every requirement, in plain language.

Security
Required. Access, change management, monitoring and risk assessment.
Availability
Uptime, capacity and recovery.
Confidentiality
Protecting information marked confidential.
Processing integrity
Complete, accurate and timely processing.
Privacy
How personal information is collected, used and disposed of.

With Genroks

From first question to SOC 2, in four steps.

  1. Step 1

    Scope

    Choose the criteria your customers care about. Security is always included.

    You getCriteria and scope
  2. Step 2

    Implement

    Close gaps with guided tasks, with your policies ready from onboarding.

    You getPolicies and controls
  3. Step 3

    Observe

    For Type II, Genroks collects evidence continuously across the observation window.

    You getContinuous evidence
  4. Step 4

    Report

    We coordinate a licensed CPA firm, and share the report through your Trust Center.

    You getYour SOC 2 report

Questions, answered.

  • Type I checks that your controls are designed properly at a single point in time. Type II checks that they worked over a period, usually 3 to 12 months. Most enterprise customers want Type II.

Get ready for SOC 2.

Book a demo and see exactly where you stand on SOC 2 today, and what Genroks builds for you from there.