SOC 2 assesses service organizations' security, availability, processing integrity, confidentiality, and privacy controls against the AICPA's, in accordance with SSAE 18.
To summarize, The SOC 2 report is an internal control report capturing how a company safeguards customer data and how well those controls are operating. Xano went through a detailed audit with a reputable AICPA auditor and the attestation can be found below.
Due to the sensitive security nature of our SOC 2 Type 2 report, the decision to limit its distribution is based on careful consideration of our goals, risks, and regulatory obligations, as well as the expectations of our stakeholders. That is why we are only limiting the distribution of our SOC 3 report to legitimate enterprise inquiries only.