SOC 3 report (general-use trust services report)
A short, publishable version of a SOC 2 examination: same categories, much less detail, so a provider can show it on a website.
- 2requirementsin our own words
- 0editions none dated yet
- 0places where it is a duty of 30 assessed
- 18 Oct 2026last checkedat the sources below
Where it applies
It is voluntary in the 30 places assessed. The outcome holds under the conditions shown and says nothing about any one site.
| Where | Outcome | Basis | Conditions | Authority and route |
|---|---|---|---|---|
| All 30 places | Applies | Voluntary In force | Sector: enterprise, cloud and financial customers No law in this country requires it; customers, lenders or tenders decide. | Not stated |
What it asks for
2 requirements, each in our own words with the evidence an assessor would expect and who on a site usually owns it. Read the clause itself on the scheme owner's page.
| Requirement | Evidence expected | Owner | When |
|---|---|---|---|
| Choose to publish a short general-use report derived from a SOC 2 style examination. | Decision record and the underlying examination Record, checked by document review | Compliance manager | Every year Governance, the organisation |
| Publish the report with correct wording: it is an auditor's report, not a certificate. | Web page wording review Record, checked by document review | Compliance manager | Every year Disclosure, the organisation |
Stages, levels and report types
What each one is, how long it is valid, and the claim you may make once you hold it.
| Stage or level | Report or award | Period and validity | What you may say |
|---|---|---|---|
| General-use report | assurance report (SOC 3) | a periodreport covers a period | Say: SOC 3 report for the period; may be shared publicly. |
About the programme
- Scheme owner
- AICPA & CIMA
- Assessed by
- An independent auditor
- Scope
- system or service of a service organisation
- Levels
- single report type
- Validity
- Covers a period; no certificate expiry.
- Accreditation route
- none: licensed CPA firms
- Who asks for it
- Enterprise and colocation customers, Wholesale and hyperscale customers
- Where it is used
- global
Sources
Official bodies behind this page, each with the date we last read it.
No official body publishes a page for this scheme. The scheme owner's own page, linked under About the programme, is where the clauses are published.
Not legal advice. Confirm each duty against the text itself.