SOC 2 (Trust Services Criteria) assessment on CyberSentien

61 catalogued controls across 13 areas, assessed deterministically against your uploaded and connector-collected evidence — honest coverage against the full catalogue, consultant-grade reporting from one run.

Book a SOC 2 (Trust Services Criteria) demo → Try it on sample docs

Licence-gated catalogue: CyberSentien holds control IDs and its own labels only — the full standard text requires your licence and is never reproduced.

Used by: Banks & APRA-regulated · GRC consultants & practices · Healthcare

Coverage areas

PrivacyCommon Criteria — logical & physical accessCommon Criteria — control environmentCommon Criteria — system operationsProcessing integrityCommon Criteria — risk assessmentCommon Criteria — communication & informationCommon Criteria — control activitiesAvailabilityCommon Criteria — monitoringCommon Criteria — risk mitigationConfidentialityCommon Criteria — change management

Generated from the live catalogue at build time — control identifiers and CyberSentien's own labels; no standard text is reproduced.

Honest coverage

Verdicts against the FULL catalogue — controls without evidence read “manual assessment required”, never a fabricated pass.

Evidence lineage

Every report carries a run id and SHA-256 integrity anchor; sections trace to the controls and evidence they rest on.

One assessment, every report

The same run renders the SOC 2 (Trust Services Criteria) report, executive brief and board pack — no drift between audiences.

See SOC 2 (Trust Services Criteria) on the real engine

Run it against synthetic sample documents now, or bring your own evidence in a gated demo week.

Request the demo →