---
title: SOC 2 Audits | TrustBridge Compliance
description: SOC 2 Type 1 and Type 2 audits from TrustBridge Compliance. Know the right report type, scope and evidence before the audit begins, from the first customer request to the final report.
---
[Skip to content](https://www.trustbridgecompliance.com/services/soc-2#main-content)
[](https://www.trustbridgecompliance.com?hsLang=en)
Menu
[Why TrustBridge](https://www.trustbridgecompliance.com/why-trustbridge?hsLang=en)
[Services](https://www.trustbridgecompliance.com/services?hsLang=en)
Services submenu
[SOC 1](https://www.trustbridgecompliance.com/services/soc-1?hsLang=en) [SOC 2](https://www.trustbridgecompliance.com/services/soc-2) [ISO 27001](https://www.trustbridgecompliance.com/services/iso-27001?hsLang=en)
[Insights](https://www.trustbridgecompliance.com/insights?hsLang=en) [Contact](https://www.trustbridgecompliance.com/contact?hsLang=en)
Services
# SOC 2 Audits
Your customers require it.
A new customer wants a SOC 2 report. Procurement needs it before the contract can move forward. A security review has reached the point where questionnaires are no longer enough. Suddenly, SOC 2 is on your plate.
A SOC 2 audit provides independent assurance over the controls protecting your customers' data and the systems that support your services. Security is always part of the examination; availability, processing integrity, confidentiality and privacy may also be included depending on your services and customer requirements.
TrustBridge makes sure you know what you need, what's in scope and what your team will be responsible for before the audit begins.
## SOC 2 Type 1 or Type 2?
The right report depends on what your customers require and what they need the report to demonstrate.
- 
Point in time
### Type 1
Evaluates whether controls are suitably designed at a specific point in time.
- 
Over a period
### Type 2
Goes further, evaluating whether those controls operated effectively over a specified period.
Where you begin depends on the requirement, the maturity of your controls and what your customers need from the report. TrustBridge helps you determine the appropriate report type and scope before the examination begins, so you aren't taking on more than the requirement calls for—or discovering too late that the report doesn't address what your customer needs.
### What Does a SOC 2 Audit Cover?
Every SOC 2 audit includes Security. The other Trust Services Criteria are included when they are relevant to your services, commitments and customer requirements.
- **Security** – Information and systems are protected against unauthorized access, unauthorized disclosure of information, and damage to systems that could compromise the availability, integrity, confidentiality, and privacy of information or systems and affect the entity's ability to meet its objectives.
- **Availability** – Information and systems are available for operation and use to meet the entity's objectives.
- **Processing integrity** – System processing is complete, valid, accurate, timely, and authorized to meet the entity's objectives.
- **Confidentiality** – Information designated as confidential is protected to meet the entity's objectives.
- **Privacy** – Personal information is collected, used, retained, disclosed, and disposed of to meet the entity's objectives.
The objective isn't to include every category simply because it's available. The scope should reflect the services you provide, the commitments you've made and the assurance your customers actually need.
### Your Team Has a Business to Run
SOC 2 can involve people across security, IT, operations, HR and other areas of the organization. Their participation is necessary. Their attention shouldn't be consumed by an audit process that isn't well managed.
TrustBridge establishes responsibilities, timing and evidence requirements early, giving your team a clear view of what's needed and when. Requests stay connected to the controls being examined, questions are addressed as they arise and issues are identified while there is still time to deal with them.
That doesn't mean there won't be work to do. It means your team understands the work, why it's required and where the engagement stands.
## From Requirement to Report
SOC 2 may have arrived as a customer request, but getting through the audit requires decisions about scope, criteria, evidence and timing. Those decisions are easier when you know what's ahead.
TrustBridge stays with you from the initial requirement through the examination and final report, bringing clarity to each stage without adding unnecessary complexity to the process.
The requirement may be SOC 2. The objective is to get your customer what they need and keep the business moving forward.
Talk to us about SOC 2 for your organization.
[Request a Proposal](https://www.trustbridgecompliance.com/contact?hsLang=en)
Related services
- Do your services affect your clients' financial reporting? [SOC 1](https://www.trustbridgecompliance.com/services/soc-1?hsLang=en)
- Customers asking for ISO 27001 as well? [ISO 27001](https://www.trustbridgecompliance.com/services/iso-27001?hsLang=en)
[](https://trustbridgecompliance.com?hsLang=en)
### Services
- [SOC 1](https://www.trustbridgecompliance.com/services/soc-1?hsLang=en)
- [SOC 2](https://www.trustbridgecompliance.com/services/soc-2)
- [ISO 27001](https://www.trustbridgecompliance.com/services/iso-27001?hsLang=en)
### Company
- [Why TrustBridge](https://www.trustbridgecompliance.com/why-trustbridge?hsLang=en)
- [Insights](https://www.trustbridgecompliance.com/insights?hsLang=en)
- [Contact](https://www.trustbridgecompliance.com/contact?hsLang=en)
© 2026 TrustBridge Compliance. All rights reserved.
[Terms & Conditions](https://www.trustbridgecompliance.com/terms-conditions?hsLang=en) · [Privacy Policy](https://www.trustbridgecompliance.com/privacy-policy?hsLang=en)
·
Cookie settings
TrustBridge Compliance, its partners, employees, and others involved in the certification of organizations fully understand the importance of impartiality in undertaking its certification activities. TrustBridge Compliance will therefore ensure in its dealings with current or potential clients that all employees, or other personnel involved in certification activities are, and will remain, impartial. To ensure that impartiality is both maintained and can be demonstrated, TrustBridge Compliance has identified and assessed all relationships which may result in a conflict of interest or pose a threat to impartiality.
“TrustBridge” is the brand name under which TrustBridge Assurance and TrustBridge Compliance LLC provide professional services. TrustBridge Assurance and TrustBridge Compliance LLC practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. TrustBridge Assurance is a licensed certified public accounting firm registered with the Public Company Accounting Oversight Board (PCAOB) that provides attest services to its clients, and TrustBridge Compliance LLC provides non-attest cybersecurity and compliance professional services to its clients. TrustBridge Compliance LLC is not a licensed CPA firm. TrustBridge Assurance and TrustBridge Compliance LLC are independently owned and are not liable for the services provided by any other entity providing services under the TrustBridge brand. Our use of the terms “our firm” and “we” and “us” and terms of similar import, denote the alternative practice structure conducted by TrustBridge Assurance and TrustBridge Compliance LLC.
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.trustbridgecompliance.com/#organization",
"@type" : "ProfessionalService",
"areaServed" : "United States",
"description" : "TrustBridge Compliance provides SOC 1, SOC 2 and SOC 3 audits, ISO/IEC 27001 certification, HIPAA compliance assessments and cybersecurity assessments.",
"image" : "https://246503665.fs1.hubspotusercontent-na2.net/hubfs/246503665/trustbridge-compliance-logo.png",
"knowsAbout" : [ "SOC 1", "SOC 2", "SOC 3", "ISO/IEC 27001", "Agreed-Upon Procedures", "HIPAA compliance assessment", "Cybersecurity assessment" ],
"legalName" : "TrustBridge Compliance LLC",
"logo" : "https://246503665.fs1.hubspotusercontent-na2.net/hubfs/246503665/image1-31.png",
"name" : "TrustBridge Compliance",
"sameAs" : [ "https://www.linkedin.com/company/trustbridgecompliance/", "https://www.youtube.com/@TrustBridgeInsights", "https://www.facebook.com/profile.php?id=61589056125402" ],
"url" : "https://www.trustbridgecompliance.com/"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.trustbridgecompliance.com/#website",
"@type" : "WebSite",
"name" : "TrustBridge Compliance",
"publisher" : {
"@id" : "https://www.trustbridgecompliance.com/#organization"
},
"url" : "https://www.trustbridgecompliance.com/"
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://www.trustbridgecompliance.com/services/soc-2#service",
"@type" : "Service",
"areaServed" : "United States",
"description" : "SOC 2 Type 1 and Type 2 audits from TrustBridge Compliance. Know the right report type, scope and evidence before the audit begins, from the first customer request to the final report.",
"name" : "SOC 2 Audits",
"provider" : {
"@id" : "https://www.trustbridgecompliance.com/#organization"
},
"serviceType" : "SOC 2 Audits",
"url" : "https://www.trustbridgecompliance.com/services/soc-2"
}
```