soc2audit.ai is built and operated by Cyber Security Services, a CISSP-led cybersecurity firm founded in 2014 that delivers SOC 2 readiness, penetration testing and vCISO services.
The platform runs on Azure App Service with Azure Database for PostgreSQL and Azure Blob Storage, inheriting Azure's physical and infrastructure security controls.
All connections use HTTPS with TLS 1.2 or higher. Customer data in the database and file storage is encrypted at rest with AES-256.
Every request is tied to an authenticated user and their organization, and every record is scoped to that organization, so one customer can never see another's data.
Your CPA firm gets scoped, read-only access to the evidence and controls in your audit, and nothing else.
Connections to AWS, GitHub, Microsoft 365 and Okta are read-only. soc2audit.ai never changes your production systems.
soc2audit.ai uses Anthropic's Claude models to power gap assessments, policy drafting, access and vendor reviews and questionnaire answers. Your content is sent to the model only to complete the task you ask for, and it is not used to train models. Every AI output is a draft that a person on your team reviews and approves.
Automated database backups retained for 35 days with point-in-time restore. Uploaded evidence files are protected by versioning and 30-day soft delete.
Availability tests run from multiple regions every few minutes, with automatic alerts to our team if the app goes down, errors spike, or storage runs high.
Staff access requires multi-factor authentication. Support access to a customer account is time-limited and recorded in an access log.
Our SOC 2 Type II report is available once a year, under NDA on request.
Microsoft Azure (hosting, database, file storage and email delivery) and Anthropic (AI processing).
Working through a security review of soc2audit.ai? Ask us for our SOC 2 report, security questionnaire answers or architecture overview, and we will respond within one business day.
