SOC 2 Type IIMap your controls to the Trust Services Criteria and collect evidence across the whole observation period, supported by our agents. A compliance engineer helps you prepare for the audit.
30 minutes, on your own setup. We show you the path to your SOC 2 report.
Hosting in the EU or USOur agents support every step. You make the decisions.
Tell us which system your customers rely on and what they expect from it. GetTeddy sets the scope, picks the right Trust Services Criteria and prepares your system description with you.
SOC 2Asking a few questionsScope agreedWhich system?Who are your customers?Which criteria?Our Gap Audit Agent checks your real systems against all nine common criteria and the additional criteria in scope. You start with a clear list of what is missing, each item with an owner.
SOC 2Gap audit runningGaps foundGetTeddy drafts the policies SOC 2 expects, tailored to how your team works. Evidence flows in from your tech stack throughout the observation period and lands on the right criterion. Your team reviews and approves.
SOC 2Writing policiesPolicies and evidence linked
Risk register, vendor reviews and monitoring connect to your controls until every criterion is green. We introduce you to an audit firm, and a compliance engineer helps you prepare for the audit.
SOC 2Preparing the auditReady for auditorThe same result, without months of spreadsheets and consultant hours.
| Consultants and spreadsheets | GetTeddy | |
|---|---|---|
| Time to audit readiness | Several months | Within weeks |
| Policies | Template packs | Written from your real setup |
| Evidence | Screenshots before the audit | Collected continuously |
| Next framework | A new project | Built on the same controls |
| After the report | Yearly scramble | Gap audits every week |
Type I looks at the design of your controls at one point in time. Type II also tests whether they operated over an observation period, usually between three and twelve months. Most customers ask for Type II.
An independent CPA firm. We suggest audit firms that fit your scope and timeline and support the first conversations.
Yes. Many ISO 27001 controls overlap with the Trust Services Criteria. GetTeddy maps your existing controls, so you only work on the gaps.
No. Our agents support every step, and a compliance engineer from our team helps you prepare for the audit.
In the region you choose, the EU or the US. Your data is kept separate from other customers and encrypted, and GetTeddy does not train AI models on your data.
Ready when you areSee your path to the report in a 30-minute demo.
Book a demo