SOC 2 readiness
Per-control posture across the AICPA Trust Services Criteria. Implementation status, evidence vault, and prior attestation history — one source of truth for every auditor request.
Excludes 1controls marked N/A (e.g. physical access for fully remote ops, where the cloud provider's SOC 2 report inherits the control). Anything below 90% needs an active remediation plan before the audit window opens.
Trust Services Criteria
Recent control activity
Status changes, evidence uploads, and auditor flags
- PS
CC6.1 Owner uploaded MFA coverage report
Priya Shah · 9d ago
- AC
CC6.6 Status moved partial → implemented
Anthony Coles · 8d ago
- MH
CC8.1 Q1 change sample evidence attached
Marcus Hill · 11d ago
- AP
CC7.5 Auditor flagged: missing recovery runbooks
A-LIGN portal · 5d ago
- MH
A1.2 Restore test passed (RTO 47m vs 60m target)
Marcus Hill · 44d ago
- S
CC3.3 Stale review — last touched 210d ago
System · 1d ago
- LP
CC4.1 Internal audit walkthrough completed
Lena Park · 19d ago
- AC
PI1.5 Owner reassigned to VP Engineering
Anthony Coles · 3d ago