SOC 2 Auditors

Can customers see my SOC 2 report?

Short answer

Yes — but selectively. SOC 2 reports contain sensitive detail, so they're shared with customers and serious prospects under NDA, not published openly. A SOC 3 report is the public-facing summary version.

Report vs public summary

SOC 2 is the detailed, NDA-gated report. SOC 3 is a trimmed, freely shareable attestation you can post publicly if you want a marketing-friendly proof point.

Managing distribution

Most companies route report requests through their security or sales team with a standard NDA, and track who has received it.

Sources

Get 3 quotes that fit.

Tell us your stage, framework, and timeline once. We match you with three firms that fit — one short call, not five sales pitches.

Free for buyers · No spam · Independent of every firm listed