Understanding the Differences Between a Vendor SOC 1, 2, 3

SOC reports are key due diligence documents to verify your vendor has the right internal controls in place to protect your organization's and customers' data. Vendor SOC reports also offer independent testing of controls.

It can get confusing to understand the different types of SOC reports, what each SOC report covers, and what each report means. To help guide you and your team in understanding what those differences are, we've created a simple infographic to reference.

Download the infographic to learn:

• What the SSAE 18 and SSAE 20 are
• Definitions of each vendor SOC report
• When to use each vendor SOC report
• How each SOC report benefits your organization