What it contains
Commitments
The promises stated in the report, rewritten in plain language and grouped by
business function such as governance, access, vendors, and operations.
Cadence and ownership prompts
The stated frequency of each commitment, what evidence usually has to show, and
a direct prompt to identify who owns the work today.
What it deliberately leaves out
The free review mirrors what the report says. It does not judge whether your organization currently meets those commitments.No gap analysis
This is not gap analysis. Assessing the organization requires interviews,
evidence, systems, and process. That is paid advisory work, not a free document
read.
No generic templates
Generic templates can make the work look smaller than it is. The review starts
with the commitments your own report already made.
soc2doc never performs the audit. SOC 2 audits are performed by an independent CPA
firm. The Commitment Review reads the report you already have; it does not replace
the auditor and does not provide assurance.
Start a review
Review my SOC 2 - free
Upload your issued SOC 2 and get the commitments mirrored back in plain English.