Explainer
What is a SOC 2 bridge letter, and when do you need one?
A bridge letter covers the gap between your last SOC 2 report and a customer's request date. Here's how it works.
What it is
A bridge (or gap) letter is a short attestation from you affirming that nothing material changed in your control environment between the end of your report period and today.
When you need one
When a customer asks for assurance covering a date after your last report's period end, but before your next report is issued.
Limits
A bridge letter is self-issued, not an auditor opinion, and typically only covers a few months. It supplements — never replaces — a SOC 2 report.