# SOC 2 Compared

> Compare SOC 2 compliance platforms and SOC 2 audit firms: year one at 25
> employees on each vendor's published prices, with the audit and what else
> the price leaves out.

Each platform listing gives year one at 25 and 100 employees on its own
published prices, what the price leaves out (the audit first), and the day
we last read the vendor's page. Audit firm listings give the firm's license,
its peer review and what it publishes about price.

## Begin here

- 0 providers published.
- [Home](https://soc2compared.com/): markdown at https://soc2compared.com/index.md
- [How SOC 2 Compared prices year one](https://soc2compared.com/methodology/): markdown at https://soc2compared.com/methodology.md
- Every listing: https://soc2compared.com/{slug}, markdown at https://soc2compared.com/{slug}.md, and its alternatives at https://soc2compared.com/{slug}/alternatives/ (markdown https://soc2compared.com/{slug}/alternatives.md). The slugs are in https://soc2compared.com/listings.json.

### Articles and guides

- [Articles](https://soc2compared.com/blog/): markdown at https://soc2compared.com/blog.md

## Endpoints and data files

- [listings.json](https://soc2compared.com/listings.json): every published provider as JSON, with pricing, categories and the date it was last checked.
- [llms-full.txt](https://soc2compared.com/llms-full.txt): every listing in one markdown file.
- [index.json](https://soc2compared.com/index.json): counts, licence and every machine address.
- [openapi.json](https://soc2compared.com/openapi.json): the read and submit endpoints.
- [MCP](https://soc2compared.com/mcp): JSON-RPC tools to search, read, compare and submit. Tool list at https://soc2compared.com/.well-known/mcp.json; operations at https://soc2compared.com/.well-known/agents.json.
- [Search API](https://soc2compared.com/api/search?q=): full-text search over published listings, JSON.
- [RSS](https://soc2compared.com/rss.xml) and [sitemap](https://soc2compared.com/sitemap.xml).

## Using the figures

SOC 2 Compared reuse terms (https://soc2compared.com/terms): Search, AI
answers and AI training are all allowed to use the year-one figures and the
pages behind them. Credit SOC 2 Compared by name and link the page the
figure is on.

Machine-readable: https://soc2compared.com/license.xml (RSL 1.0,
application/rsl+xml). Full text: https://soc2compared.com/terms.

## For vendors, firms and agents

Submitting a provider (POST https://soc2compared.com/api/submit, or MCP
submit_listing) needs the session cookie of an account with a verified email
on the provider's own domain, or an agent key that account made at
https://soc2compared.com/dashboard/agents (Authorization: Bearer); sign in
at https://soc2compared.com/login?next=%2Fsubmit. The refusals and how to
clear each one are in openapi.json. The fit check starts at once and usually
answers within a minute: poll GET
https://soc2compared.com/api/submissions/{id} and wait the Retry-After
seconds it sends while fit is "checking". fit then reads "accepted" (it goes
live, and the account is mailed), "rejected" (mailed with the reason) or
"undecided" (a person looks within 2 days). Claim a listing at
https://soc2compared.com/claim/{slug}. Send a buyer enquiry with POST
https://soc2compared.com/api/lead.