SOC 2-Compliant Governance, Risk & Compliance Vendors
Governance, Risk & Compliance vendors that hold SOC 2 certification
Drata
9/32Continuous compliance and security automation platform.
OneTrust
8/32Privacy, security, and governance, risk, and compliance (GRC) management platform.
Secureframe
6/32Security and compliance automation platform.
Vanta
5/32Trust and compliance automation platform (SOC 2, ISO 27001, and other framework readiness).
Resolver
5/32Risk management and security operations (GRC) software, part of Kroll.
A-LIGN
4/32Cybersecurity compliance and audit services firm (SOC 2, ISO 27001, and other assessments).
LogicGate
3/32Risk Cloud governance, risk, and compliance (GRC) platform.
Hyperproof
2/32Compliance operations and risk management automation platform.
Sprinto
1/32Compliance automation platform for SOC 2, ISO 27001, and other frameworks.
TrustArc
1/32Privacy management and compliance automation platform.
Offers SOC 2 assurance/certification programs to customers; own SOC 2 status not clearly publicly documented
MetricStream
0/32Integrated risk management and governance, risk, and compliance (GRC) platform.
Referenced by third-party security profile trackers; no public first-party trust center located
These governance, risk & compliance vendors do not currently hold SOC 2 certification:
Know a vendor we're missing?