# SOC 3: General-use Trust Services report

> A public, summary version of SOC 2 you can post on your website.

URL: https://securei3.com/standards/soc-3/
Category: Attestation & assurance: Attestation / assessment
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


A SOC 3 report is issued by a CPA firm for the same examination as SOC 2 but without detailed control descriptions and test results, so it can be freely shared. It is a useful marketing companion to a SOC 2 Type 2 report. We arrange both through our partner CPA firms.

## Who it is for

- SaaS companies wanting a shareable trust signal

## Benefits

- Public assurance without an NDA

## How Secure iQube helps

1. **Scoping**: Agree the systems, services and criteria in scope, and whether a Type 1 or Type 2 report fits your customers and timeline.
2. **Readiness assessment**: Map existing controls to the criteria, identify gaps and design missing controls with owners and evidence.
3. **Remediation**: Put policies, tooling and processes in place, and rehearse evidence collection so it is routine, not a scramble.
4. **Audit through our CPA partners, or yours**: We can arrange the examination with one of our partner licensed CPA firms, so you have one point of contact from readiness to report. If you already have an audit firm, we work alongside them instead.
5. **Observation period and report**: For Type 2, we monitor controls through the observation window and help you respond to exceptions before the report is issued.

## Frequently asked questions

### Can we get SOC 3 without SOC 2?

In practice SOC 3 is issued alongside a SOC 2 examination covering the same period.

Related: https://securei3.com/standards/soc-2/

Contact: https://securei3.com/contact/: info@securei3.com