Glossary
What is a SOC 2 page?
A SOC 2 page is the part of a company’s website that states whether it holds a SOC 2 report, which type and scope it covers, and how customers can request a copy.
Also called SOC 2 compliance page
What SOC 2 is
SOC 2 is an audit framework from the American Institute of Certified Public Accountants (AICPA). An independent CPA firm examines a company’s controls against the Trust Services Criteria: security, which is always included, and optionally availability, processing integrity, confidentiality and privacy.
A Type I report checks that controls are designed properly at one point in time. A Type II report checks that they actually worked over a period, often between three and twelve months. Enterprise buyers usually ask for Type II. SOC 2 results in a report, not a certificate, and the report is normally shared under a non-disclosure agreement.
What B2B buyers look for
- Type I or Type II, and the dates of the audit period
- Which Trust Services Criteria are covered
- Which products or systems are in scope
- The name of the audit firm
- A clear way to request the report, such as a form or a trust portal
- Related documents: bridge letter, penetration test summary, policies
Why it matters for B2B websites
SOC 2 is one of the first things procurement checks for software vendors in the US. If a buyer has to email sales to learn whether you have it, the deal slows down. A clear page, linked from the footer and the enterprise pages, answers it in seconds and shows that the company is ready for larger customers.
Accuracy matters more than design here. Claiming a Type II report when you have Type I, or showing an expired audit period, damages trust exactly where you need it.
How we handle it
We write SOC 2 and security pages with your compliance owner, using only facts from your actual report, and build them into the trust center or security section. It is a standard part of our enterprise website design work.
Last updated 15 November 2026
