SOC 2 is an independent security report that proves your company handles customer data responsibly. You usually need it when a larger customer asks for it before signing. See What is SOC 2? for the full picture.
No tool can. Only a licensed CPA audit firm can issue a SOC 2 report. ReadySOC gets you ready for that audit: it shows what to do, helps you write your policies, keeps your evidence organized and tracks your progress.
No. ReadySOC is written for founders and small teams. Every control comes with plain-English guidance on what it means, what evidence to collect and what steps to take.
It depends on where you start, but most small teams can be audit-ready in roughly two to three months of steady work. A Type I report looks at one point in time. A Type II report covers a longer period, usually 6 to 12 months, so it takes longer.
SOC 2 today, covering all five Trust Service Criteria. ISO 27001 mapping is planned but not available yet.
You get 14 days to use ReadySOC, with no credit card required. Join the waitlist and we will set up your workspace and email you a sign-in link.
There is no password to remember or lose. Enter your work email and we send you a one-time sign-in link that expires after 15 minutes.
Yes. Admins invite teammates by email and choose whether each person is an admin or a member. Everyone works in the same shared workspace, and you can assign each control to an owner with a due date.
Both can update controls, upload evidence and edit policies. Admins can also invite or remove people, approve policies and manage settings.
For any control you can ask for guidance. It lists the evidence an auditor will expect, concrete steps to implement the control and the questions auditors tend to ask. Only the control’s name, description and status are used. Your files and notes are never sent.
Yes. Mark a control as Not applicable and it is left out of your readiness score. Keep a short note explaining why, because your auditor will ask.
It is the share of applicable controls marked Implemented. Controls marked Not applicable are not counted. See Reading your readiness score.
It is a clean summary of every control, its status, owner and evidence. Print it or save it as a PDF to share with leadership, investors or your auditor.
Yes. There are ten ready-made templates, including Information Security, Access Control, Incident Response and Vendor Management. Each one fills in your company name, shows what you still need to complete, and lists the controls it supports. See Using policy templates.
Treat them as a strong starting point, not a finished product. You need to fill in the highlighted details and make sure the policy describes what your company really does. Auditors check that you follow your policies, so do not promise anything you do not do.
Yes. Auditors expect to see that leadership approved each policy and reviews it regularly. An admin can approve a policy in ReadySOC, which records who approved it, the date and a version number, and sets a review date one year out.
Your workspace is private to your company. Other customers cannot see your controls, policies or files. Uploaded files can be downloaded only by signed-in members of your company, or by an auditor you choose to give a link to. You can revoke that link at any time. Read more on our Security page.
PDF, Word, Excel, PNG, JPG, TXT and CSV. See What counts as evidence? for what auditors look for.
Yes. You can remove evidence files yourself at any time. To close your workspace and have everything deleted, email hello@readysoc.com.
Create an auditor link from the Report page. Your auditor opens it in a browser, with no account needed, and sees your readiness summary, controls, approved policies and evidence files, read-only. Links expire automatically and you can revoke one at any time. See Sharing with your auditor.
No. SOC 2 audits are done by independent CPA firms. You choose the firm. ReadySOC helps you prepare, so the audit goes faster and costs less of your time. See Sharing with your auditor.
See the plans on our pricing section. You can try it free for 14 days first. Audit fees from your CPA firm are separate.
Yes. There are no long-term contracts.
Search this Help Center, or email hello@readysoc.com. A real person will reply.
Still stuck? Email hello@readysoc.com and a real person will reply.