What is SOC 2?
Service Organization Control report evaluating security, availability, processing integrity, confidentiality, and privacy controls over a period of time.
SOC 2 Type II is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official SOC 2 program ↗.
Vendors with SOC 2
320Analytics
Artificial Intelligence
Communication
Customer Support
Data Engineering
Design & Creative
DevOps & Monitoring
Betty Blocks
2/32
Bitbucket
5/32
BrowserStack
6/32
Bubble
2/32
CircleCI
2/32
ConnectWise
2/32
Cypress.io
1/32
Datadog
17/32
Datto RMM
4/32
Freshservice
10/32
GitHub
13/32
GitLab
3/32
Glide
1/32
Google Apigee
10/32
Grafana Cloud
3/32
Honeycomb
4/32
JFrog
7/32
Kaseya
4/32
Kong
4/32
LaunchDarkly
5/32
Make
4/32
ManageEngine
3/32
Mendix
13/32
MongoDB Atlas
17/32
MuleSoft
6/32
n8n
3/32
New Relic
6/32
NinjaOne
3/32
PagerDuty
6/32
Postman
9/32
Retool
4/32
Rollbar
5/32
Sauce Labs
3/32
Sentry
3/32
ServiceNow
17/32
SolarWinds
3/32
SonarQube
2/32
Supabase
4/32
Tyk
4/32
Zapier
4/32
E-Commerce
Education & Learning
ERP & Operations
Finance & Payments
Governance, Risk & Compliance
HR & People Ops
Infrastructure & Cloud
Acronis
6/32
Amazon Web Services
21/32
Backblaze
5/32
Carbonite
2/32
Cloudflare
20/32
DigitalOcean
10/32
Druva
8/32
Elasticsearch
8/32
Fastly
5/32
Firebase
7/32
Fly.io
2/32
Google Cloud Platform
23/32
Heroku
7/32
Kinsta
4/32
Microsoft Azure
23/32
Netlify
9/32
PlanetScale
4/32
Railway
3/32
Redis Cloud
12/32
Render
4/32
Rubrik
9/32
Veeam
10/32
Vercel
10/32
Vultr
12/32
Wasabi
6/32
WP Engine
2/32
Marketing
Productivity & Docs
Project Management
Sales & CRM
Security
1Password
9/32
Auth0
8/32
Bitdefender
8/32
Bitwarden
7/32
Check Point
2/32
Checkmarx
3/32
Clerk
4/32
CrowdStrike
17/32
Cybereason
9/32
Dashlane
4/32
ESET
5/32
Fortinet
9/32
GitGuardian
3/32
Ivanti
4/32
JumpCloud
2/32
Keeper
9/32
KnowBe4
8/32
Lacework
5/32
LastPass
3/32
Mimecast
5/32
Netskope
11/32
Okta
21/32
Orca Security
10/32
Palo Alto Networks
10/32
Ping Identity
3/32
Proofpoint
10/32
Rapid7
7/32
Semgrep
1/32
SentinelOne
8/32
Snyk
7/32
Splunk
11/32
Tailscale
1/32
Tenable
6/32
Trend Micro
6/32
Varonis
8/32
Veracode
3/32
VMware Carbon Black
3/32
Wiz
13/32
WorkOS
3/32
Zscaler
14/32
Partial or conditional
26These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.
Gusto
SOC 2 (Type not specified. report under NDA)
2/32
Deel
SOC 2 (Type not specified. report under NDA)
7/32
Mailchimp
Inherited from parent company Intuit's SOC program; not separately itemized for Mailchimp on its own security page
2/32
Chorus.ai
Chorus.ai was acquired by ZoomInfo in 2021; compliance now follows ZoomInfo's program rather than a standalone Chorus.ai certification
0/32
Oracle Eloqua
Inherited from Oracle Cloud Infrastructure platform-level attestation
0/32
Justworks
Third-party SOC 2 report summary services reference a Justworks, Inc. SOC 2 report, but no first-party page from Justworks itself was found confirming the certification
0/32
Cisco Duo
Cited as an alignment point for K-12/education security, not confirmed as Duo's own certification
1/32
FreshBooks
Vendor press release cites SOC 2 Type 1 certification completed; ongoing Type 2 status not confirmed on the main security page
1/32
Tipalti
Referenced in third-party compliance directories; no first-party page confirming was found
0/32
AppDynamics
Now under Splunk/Cisco ownership; compliance largely follows the parent's programs, not itemized separately for AppDynamics
0/32
Bugsnag
Referenced at SmartBear parent-company trust center level; not itemized separately for Bugsnag
3/32
Linode
Referenced in Linode community/support posts; official standalone Linode trust page not confirmed post-Akamai integration
0/32
Akamai
Referenced in third-party compliance directories and Akamai's own glossary content; no single first-party certificate list page confirmed in this pass
1/32
OneLogin
Vendor references 'existing certifications' generically without naming SOC2 specifically on this page
1/32
Symantec
Reports available on request per Broadcom knowledge base articles; not itemized on the main compliance landing page
0/32
Keeper Security
SOC 3 confirmed directly; SOC 2 status implied but not independently confirmed in this pass
2/32
Heap
SOC 2 Type II report available on request via the trust portal. The security page itself claims only a SOC 2 certified hosting facility
6/32
LawPay
Covered under parent company 8am/AffiniPay's SOC 2 program
1/32
Skillsoft
Referenced in Percipio infrastructure overview; full public report not located
0/32
OutSystems
Available to Sentry-entitled (higher tier) customers
4/32
MetricStream
Referenced by third-party security profile trackers; no public first-party trust center located
0/32
TrustArc
Offers SOC 2 assurance/certification programs to customers; own SOC 2 status not clearly publicly documented
1/32
Formstack
Referenced by third-party security trackers; first-party trust center not directly verified
0/32
Strapi
SOC 2 announced for Strapi Cloud offering; open-source self-hosted deployments out of scope
0/32
LambdaTest
Referenced on company trust page; full public report not independently confirmed
0/32
TestRail
Referenced via dedicated SOC 2 compliance page; badge/report not independently verified from this page
1/32
Not certified
2Customer Support
Marketing
74 unverified
For these vendors, SOC 2 status is not publicly documented. That does not mean they lack the certification.
AffirmAfterpayAhrefsApplitoolsBambooHRBasecampBraintreeBrevoBufferCampaign MonitorCheckout.comConstant ContactContractPodAiCrazy EggDarktraceDiscordEcwidEpicorEvernoteFlexportFourKitesGoCardlessGrasshopperGrooveHeightHotjarIFSJenkinsKeapKlarnaLaikaLaterLiveChatMailerLiteMalwarebytesMcAfeeMozNamelyNimble CRMOdooOmnisendPersonioPracticePantherPrestaShopProofHubQualtricsQualysRe:amazeRecurlyRevolut BusinessRSA ArcherSanity.ioScytaleSeamless.aiSemrushSharpSpringShipStationShopwareSketchSoftrSophosSquareSquarespaceTalentLMSThoropassTidioTravis CIVolusionWave AccountingWherebyWireWiseWooCommerceWorkable
Browse by category
SOC 2-compliant analytics
SOC 2-compliant artificial intelligence
SOC 2-compliant communication
SOC 2-compliant data engineering
SOC 2-compliant design & creative
SOC 2-compliant devops & monitoring
SOC 2-compliant e-commerce
SOC 2-compliant education & learning
SOC 2-compliant erp & operations
SOC 2-compliant finance & payments
SOC 2-compliant governance, risk & compliance
SOC 2-compliant hr & people ops
SOC 2-compliant infrastructure & cloud
SOC 2-compliant marketing
SOC 2-compliant productivity & docs
SOC 2-compliant project management
SOC 2-compliant sales & crm
SOC 2-compliant security
SOC 2-compliant customer support
SOC 2-compliant websites & cms
Don't see a vendor you need? Submit it