Book a consultation
Attestation & assurance / Attestation / assessment

SOC 3: General-use Trust Services report

A public, summary version of SOC 2 you can post on your website.

Talk to a consultant Start with a gap assessment

A SOC 3 report is issued by a CPA firm for the same examination as SOC 2 but without detailed control descriptions and test results, so it can be freely shared. It is a useful marketing companion to a SOC 2 Type 2 report. We arrange both through our partner CPA firms.

Who it is for

  • SaaS companies wanting a shareable trust signal

What you gain

  • Public assurance without an NDA

How we get you ready

  1. Scoping

    Agree the systems, services and criteria in scope, and whether a Type 1 or Type 2 report fits your customers and timeline.

  2. Readiness assessment

    Map existing controls to the criteria, identify gaps and design missing controls with owners and evidence.

  3. Remediation

    Put policies, tooling and processes in place, and rehearse evidence collection so it is routine, not a scramble.

  4. Audit through our CPA partners, or yours

    We can arrange the examination with one of our partner licensed CPA firms, so you have one point of contact from readiness to report. If you already have an audit firm, we work alongside them instead.

  5. Observation period and report

    For Type 2, we monitor controls through the observation window and help you respond to exceptions before the report is issued.

SOC 3 questions

Can we get SOC 3 without SOC 2?
In practice SOC 3 is issued alongside a SOC 2 examination covering the same period.

Ready to start on SOC 3?

Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.

Book a free consultation Try the standard finder