Definition
SOC 2
AICPA audit report on a vendor's security, availability, and confidentiality controls.
SOC 2 Type II reports evidence that a vendor's controls have operated effectively over time. Health-tech buyers should require Type II — Type I is a point-in-time snapshot.