# What Is a SOC 2 Page? What Buyers Look For > A SOC 2 page tells B2B buyers whether a company has a SOC 2 report and how to get it. What SOC 2 means, Type I vs Type II, and what buyers look for. Source: https://pentaclay.com/glossary/soc-2-page Glossary # What is a SOC 2 page? A SOC 2 page is the part of a company’s website that states whether it holds a SOC 2 report, which type and scope it covers, and how customers can request a copy. Also called SOC 2 compliance page ## What SOC 2 is SOC 2 is an audit framework from the American Institute of Certified Public Accountants (AICPA). An independent CPA firm examines a company’s controls against the Trust Services Criteria: security, which is always included, and optionally availability, processing integrity, confidentiality and privacy. A Type I report checks that controls are designed properly at one point in time. A Type II report checks that they actually worked over a period, often between three and twelve months. Enterprise buyers usually ask for Type II. SOC 2 results in a report, not a certificate, and the report is normally shared under a non-disclosure agreement. ## What B2B buyers look for - Type I or Type II, and the dates of the audit period - Which Trust Services Criteria are covered - Which products or systems are in scope - The name of the audit firm - A clear way to request the report, such as a form or a trust portal - Related documents: bridge letter, penetration test summary, policies ## Why it matters for B2B websites SOC 2 is one of the first things procurement checks for software vendors in the US. If a buyer has to email sales to learn whether you have it, the deal slows down. A clear page, linked from the footer and the enterprise pages, answers it in seconds and shows that the company is ready for larger customers. Accuracy matters more than design here. Claiming a Type II report when you have Type I, or showing an expired audit period, damages trust exactly where you need it. ## How we handle it We write SOC 2 and security pages with your compliance owner, using only facts from your actual report, and build them into the [trust center](https://pentaclay.com/glossary/trust-center) or security section. It is a standard part of our [enterprise website design](https://pentaclay.com/services/enterprise-website-design) work. Read next - [Enterprise website design](https://pentaclay.com/services/enterprise-website-design) Last updated 15 November 2026 Related terms ## Terms that go with SOC 2 pages - [Trust center A trust center is a page or portal on a company’s website that brings together its security, compliance and privacy information, such as certifications, policies, subprocessors and audit reports, for buyers and their security teams.](https://pentaclay.com/glossary/trust-center) - [Case study A B2B case study is a page that tells the story of one named customer’s problem, what was done about it with your product or service, and what changed as a result, written so a similar buyer can picture the same outcome.](https://pentaclay.com/glossary/case-study) - [Landing page A landing page is a web page designed around a single audience and a single action, such as booking a demo or downloading a report, usually built for visitors arriving from a specific campaign, ad or search.](https://pentaclay.com/glossary/landing-page) - [Information architecture Information architecture (IA) is the way a website’s content is organized, grouped, labeled and linked, so visitors can find what they need and search engines can understand how pages relate to each other.](https://pentaclay.com/glossary/information-architecture) [All glossary terms](https://pentaclay.com/glossary) ## Questions about SOC 2 pages ### Can’t find your answer? Book a call and let’s talk. [Book a call](https://cal.com/pentaclay/discovery-call) Or email us at [contact@pentaclay.com](mailto:contact@pentaclay.com) Can I publish my SOC 2 report on my website? The full report is usually restricted to customers and prospects under NDA, as the audit firm’s terms typically require. Publish a summary and a request process instead. A SOC 3 report is the version designed for public sharing. What is the difference between SOC 2 Type I and Type II? Type I evaluates whether controls are designed properly at a single date. Type II tests whether they operated effectively over a period of months, which gives buyers more assurance. Can I say “SOC 2 compliant” while the audit is in progress? Say what is true, for example “SOC 2 Type II audit in progress, expected to complete in a stated quarter”. Do not show a badge or claim compliance until the report is issued. Is SOC 2 required by law? No. It is a voluntary audit, but many enterprise buyers require it, or an equivalent such as ISO 27001, from software vendors that handle their data. ## Your business grew up. Your website should too If customers need a demo just to understand what you sell, your website isn’t doing its job. - We sign an NDA on request. - You own the site, the code and every account once it’s paid. - Your first call is with Erfan, the founder. **Kazi Mohammed Erfan** Founder Don’t want to fill in the form? [Book a call directly](https://cal.com/pentaclay/discovery-call) ## Not sure? Ask AI about Pentaclay ### Pentaclay, in short Updated 17 Oct 2026 Pentaclay is a B2B website design agency for AI companies that sell to enterprises. We write, design and build marketing websites in Framer, Webflow and Next.js, and stay to help after launch. Pentaclay LLC is registered in New Mexico, USA; our team works from Dhaka, Bangladesh, with calls until 12:30pm US Eastern. Founded in 2023 by Kazi Mohammed Erfan, who brings 12 years of design experience.