Reading your readiness score

Your readiness score tells you at a glance how prepared you are for a SOC 2 audit. Here's exactly how it works and what to do with it.

How the score is calculated

The formula is simple:

Score = Implemented controls ÷ Applicable controls × 100

• Implemented — Controls with status set to Implemented.
• Applicable — All controls except those marked Not Applicable.
• In Progress controls do not count — they count as gaps until fully implemented.

What the colors mean

• Green (75–100%) — You're in good shape. Focus on finishing remaining controls and ensuring evidence is complete.
• Amber (40–74%) — Meaningful progress but significant work remains. Prioritize Not Started controls.
• Red (0–39%) — Early stage. Focus on the most critical Common Criteria controls first.

Score by criteria

The dashboard also shows your score broken down by Trust Service Criteria category. This helps you identify which areas need the most attention — for example, you might be 90% on Common Criteria but 0% on Availability.

How to improve your score

• Work through the At-risk controls on your dashboard — these are your Not Started controls.
• Use AI guidance to understand what each control needs.
• Upload evidence before marking a control Implemented.
• Mark controls as Not Applicable if they genuinely don't apply — this removes them from your denominator and may raise your score.