---
title: SOC 1 Audits | TrustBridge Compliance
description: SOC 1 Type 1 and Type 2 audits from TrustBridge Compliance, for service organizations whose controls affect their customers' financial reporting. Scope and report type defined at the outset.
---
[Skip to content](https://www.trustbridgecompliance.com/services/soc-1#main-content)
[](https://www.trustbridgecompliance.com?hsLang=en)
Menu
[Why TrustBridge](https://www.trustbridgecompliance.com/why-trustbridge?hsLang=en)
[Services](https://www.trustbridgecompliance.com/services?hsLang=en)
Services submenu
[SOC 1](https://www.trustbridgecompliance.com/services/soc-1) [SOC 2](https://www.trustbridgecompliance.com/services/soc-2?hsLang=en) [ISO 27001](https://www.trustbridgecompliance.com/services/iso-27001?hsLang=en)
[Insights](https://www.trustbridgecompliance.com/insights?hsLang=en) [Contact](https://www.trustbridgecompliance.com/contact?hsLang=en)
Services
# SOC 1 Audits
When your customers depend on your controls.
Payroll. Payment processing. Loan servicing. Claims processing. Financial data. When the services you provide can affect a customer's financial reporting, you may be asked for a SOC 1 report.
A SOC 1 audit provides independent assurance over the controls relevant to those services, giving your customers and their auditors information they can use in evaluating their own financial reporting controls.
TrustBridge defines the scope and report type with you at the outset, so you know what's being evaluated, what we'll need from your team and what comes next.
## SOC 1 Type 1 or Type 2?
The right report depends on what your customers and their auditors need.
- 
Point in time
### Type 1
Evaluates whether relevant controls are suitably designed at a specific point in time.
- 
Over a period
### Type 2
Evaluates both the design and operating effectiveness of those controls over a specified period.
For some organizations, the requirement can be addressed with a Type 1 report. Others need a Type 2 report that demonstrates how controls operated over time. TrustBridge works with you to determine the appropriate report and scope before the examination begins.
### What Does a SOC 1 Audit Cover?
A SOC 1 audit focuses on the services, systems and processes that could affect your customers' financial reporting. The scope depends on what you do, how you deliver those services and which controls your customers and their auditors rely on.
Depending on your organization, the audit may include:
- Transaction processing
- Access to systems and financial information
- Data processing and system interfaces
- Change management
- Reconciliations and reporting
- Business and IT controls relevant to financial reporting
Establishing the scope at the outset keeps the examination focused on the relevant controls and gives your team a clear understanding of the documentation and evidence that will be required.
## What to Expect from a SOC 1 Audit
A SOC 1 audit requires participation from your team, but it shouldn't consume their attention unnecessarily. Proper planning at the beginning of the engagement establishes responsibilities, timing and evidence requirements before fieldwork begins.
TrustBridge keeps communication direct throughout the examination, coordinates requests and addresses questions as they arise. If an issue needs attention, we identify it while there is still time to understand and address it rather than waiting until the report is nearing completion.
The result is a more predictable audit process for your team and a SOC 1 report your customers and their auditors can use.
Talk to us about SOC 1 for your organization.
[Request a Proposal](https://www.trustbridgecompliance.com/contact?hsLang=en)
Related services
- Customers asking about security, availability or privacy? [SOC 2](https://www.trustbridgecompliance.com/services/soc-2?hsLang=en)
[](https://trustbridgecompliance.com?hsLang=en)
### Services
- [SOC 1](https://www.trustbridgecompliance.com/services/soc-1)
- [SOC 2](https://www.trustbridgecompliance.com/services/soc-2?hsLang=en)
- [ISO 27001](https://www.trustbridgecompliance.com/services/iso-27001?hsLang=en)
### Company
- [Why TrustBridge](https://www.trustbridgecompliance.com/why-trustbridge?hsLang=en)
- [Insights](https://www.trustbridgecompliance.com/insights?hsLang=en)
- [Contact](https://www.trustbridgecompliance.com/contact?hsLang=en)
© 2026 TrustBridge Compliance. All rights reserved.
[Terms & Conditions](https://www.trustbridgecompliance.com/terms-conditions?hsLang=en) · [Privacy Policy](https://www.trustbridgecompliance.com/privacy-policy?hsLang=en)
·
Cookie settings
TrustBridge Compliance, its partners, employees, and others involved in the certification of organizations fully understand the importance of impartiality in undertaking its certification activities. TrustBridge Compliance will therefore ensure in its dealings with current or potential clients that all employees, or other personnel involved in certification activities are, and will remain, impartial. To ensure that impartiality is both maintained and can be demonstrated, TrustBridge Compliance has identified and assessed all relationships which may result in a conflict of interest or pose a threat to impartiality.
“TrustBridge” is the brand name under which TrustBridge Assurance and TrustBridge Compliance LLC provide professional services. TrustBridge Assurance and TrustBridge Compliance LLC practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. TrustBridge Assurance is a licensed certified public accounting firm registered with the Public Company Accounting Oversight Board (PCAOB) that provides attest services to its clients, and TrustBridge Compliance LLC provides non-attest cybersecurity and compliance professional services to its clients. TrustBridge Compliance LLC is not a licensed CPA firm. TrustBridge Assurance and TrustBridge Compliance LLC are independently owned and are not liable for the services provided by any other entity providing services under the TrustBridge brand. Our use of the terms “our firm” and “we” and “us” and terms of similar import, denote the alternative practice structure conducted by TrustBridge Assurance and TrustBridge Compliance LLC.
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.trustbridgecompliance.com/#organization",
"@type" : "ProfessionalService",
"areaServed" : "United States",
"description" : "TrustBridge Compliance provides SOC 1, SOC 2 and SOC 3 audits, ISO/IEC 27001 certification, HIPAA compliance assessments and cybersecurity assessments.",
"image" : "https://246503665.fs1.hubspotusercontent-na2.net/hubfs/246503665/trustbridge-compliance-logo.png",
"knowsAbout" : [ "SOC 1", "SOC 2", "SOC 3", "ISO/IEC 27001", "Agreed-Upon Procedures", "HIPAA compliance assessment", "Cybersecurity assessment" ],
"legalName" : "TrustBridge Compliance LLC",
"logo" : "https://246503665.fs1.hubspotusercontent-na2.net/hubfs/246503665/image1-31.png",
"name" : "TrustBridge Compliance",
"sameAs" : [ "https://www.linkedin.com/company/trustbridgecompliance/", "https://www.youtube.com/@TrustBridgeInsights", "https://www.facebook.com/profile.php?id=61589056125402" ],
"url" : "https://www.trustbridgecompliance.com/"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.trustbridgecompliance.com/#website",
"@type" : "WebSite",
"name" : "TrustBridge Compliance",
"publisher" : {
"@id" : "https://www.trustbridgecompliance.com/#organization"
},
"url" : "https://www.trustbridgecompliance.com/"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.trustbridgecompliance.com/services/soc-1#service",
"@type" : "Service",
"areaServed" : "United States",
"description" : "SOC 1 Type 1 and Type 2 audits from TrustBridge Compliance, for service organizations whose controls affect their customers' financial reporting. Scope and report type defined at the outset.",
"name" : "SOC 1 Audits",
"provider" : {
"@id" : "https://www.trustbridgecompliance.com/#organization"
},
"serviceType" : "SOC 1 Audits",
"url" : "https://www.trustbridgecompliance.com/services/soc-1"
}
```