Skip to content
Tenant Excellence
Request a demo

Applies toInternational · service organisations

SOC 2

The AICPA Trust Services Criteria for security, availability and confidentiality that Microsoft 365 and Azure configuration can show, evaluated to prepare for your SOC 2 audit.

From Complete

Scope as evaluated

  • Logical access, authentication and least privilege
  • Operations, monitoring and incident detection
  • Availability, backup and confidentiality

Read from the tenant

  • Entra ID access policies, MFA and privileged roles
  • Defender, audit logging and alerting in Microsoft 365 and Azure
  • Network exposure, encryption and backup settings

Sample controls

  • CC6.1 Logical access
  • CC7.2 Security monitoring
  • A1.2 Backup and recovery
Results are configuration indications drawn from your tenant. They are not an audit opinion or a certification.

In depth

Give the auditor a link, not a folder

Every covered control shows the data Microsoft Graph returned and the endpoint it came from. One click creates a read-only snapshot for one framework; it needs no account and expires after 24 hours.

  • Structured proof per control, with its Graph or ARM source
  • Scoped to one framework, read-only, no sign-in for the auditor
  • Expires after 24 hours; creation is written to the audit log
Learn more

Questions

Questions about SOC 2

Does this give us a SOC 2 report?

No. It shows readiness against the criteria; the report comes from your auditor.

Can we share the result with our auditor?

The auditor link is a read-only, 24-hour snapshot scoped to one framework. Sharing it is your decision.

Which package includes SOC 2?

Complete (Microsoft 365) and Premium (Microsoft 365 and Azure).

Request a demo

Which frameworks do you report against?

Tell us in the demo request and we will show the matching controls on a demo tenant.

0 / 2,000

We use these details only to arrange your demo. See the privacy policy.