SOC 2, scoped for your industry
The SOC 2 framework is the same for everyone — but what auditors scrutinize, which Trust Services Criteria you scope in, and which frameworks you pair it with all depend on what your product does and who buys it. 50 category-specific guides, one per software vertical.
Why industry context changes your audit
Every SOC 2 covers the mandatory Security criteria. The real scoping decisions — whether to add Availability, Confidentiality, Processing Integrity, or Privacy, which systems land in the audit boundary, and what evidence your customers expect — track your category. A payments platform gets asked different questions in security reviews than an edtech vendor. Each guide below covers the criteria mix, category-specific scoping calls, framework pairings, and honest first-party cost data for that vertical.
All 50 industry guides
Financial services software
- SOC 2 for Fintech ›
- SOC 2 for Payments ›
- SOC 2 for Banking Infrastructure ›
- SOC 2 for Lending Software ›
- SOC 2 for Insurtech ›
- SOC 2 for Accounting Software ›
- SOC 2 for Blockchain & Web3 ›
Healthcare & life sciences
- SOC 2 for Healthtech ›
- SOC 2 for Telehealth ›
- SOC 2 for Biotech Software ›
- SOC 2 for Clinical Trial Software ›
Data, AI & infrastructure
- SOC 2 for AI & Machine Learning ›
- SOC 2 for ML Infrastructure ›
- SOC 2 for Data Analytics ›
- SOC 2 for Cloud Infrastructure ›
- SOC 2 for Hosting Providers ›
- SOC 2 for Developer Tools ›
- SOC 2 for DevOps Platforms ›
- SOC 2 for Cybersecurity ›
- SOC 2 for IT Services & MSPs ›
Public sector & regulated industries
- SOC 2 for Govtech ›
- SOC 2 for Defense Tech ›
- SOC 2 for Legaltech ›
- SOC 2 for Edtech ›
- SOC 2 for Nonprofit Tech ›
- SOC 2 for Energy & Climate Tech ›
- SOC 2 for Telecom ›
Commerce & consumer platforms
- SOC 2 for E-commerce ›
- SOC 2 for Retail Tech ›
- SOC 2 for Online Marketplaces ›
- SOC 2 for Adtech ›
- SOC 2 for Gaming ›
- SOC 2 for Media & Streaming ›
- SOC 2 for Social Platforms ›
- SOC 2 for Travel Tech ›
- SOC 2 for Hospitality ›
- SOC 2 for Event Tech ›
Operations, hardware & field
- SOC 2 for Logistics ›
- SOC 2 for Transportation ›
- SOC 2 for IoT ›
- SOC 2 for Hardware + SaaS ›
- SOC 2 for Construction Tech ›
- SOC 2 for Field Services Software ›
- SOC 2 for Proptech ›
Go-to-market & workforce software
Skip the research — get matched
Answer once and compare auditors for the same report scope, timing, inclusions, and exclusions.
Start a quote →