Free toolkit

The SOC 2 Evidence Kit

Running the controls is one thing; proving you run them is where SOC 2 gets slow. This kit is the concrete answer to "what do I actually upload?": 27 controls and 107 evidence items mapped to the Trust Services Criteria, as a checklist you can work through today.

What’s inside

  • 27 canonical controls, grouped into 8 domains
  • 107 concrete evidence items: the specific artifacts an auditor expects
  • Every control mapped to the SOC 2 Trust Services Criteria it satisfies
  • A CSV with Status, Owner, and Evidence-link columns to run the whole thing
  • Crosswalked, so most of it also counts toward ISO 27001, HIPAA, and PCI DSS

Prefer to browse first? Read the full kit on the web, no email needed.

Get the CSV checklist

We’ll email you the download link. No spam, just the kit and the occasional useful guide.

By downloading you agree to receive the kit and related emails. Unsubscribe anytime. See our privacy policy.

You’re in. Here’s the kit

We’ve emailed the link too, so it’s easy to find later.