SOC 2 is an auditing framework and procedure created by the AICPA that ensures a company has appropriate controls for security, availability, processing integrity, confidentiality, and privacy. Assuring there is proper oversight, vendors/third party compliance, and proper governance and risk management practices.