Service Organization Control 2 (SOC2) is an auditing procedure that evaluates data management based on five foundational "trust service principles": security, availability, processing integrity, confidentiality, and privacy. Formulated by the American Institute of Certified Public Accountants (AICPA), SOC2 is tailored for service providers that manage customer data in cloud environments, affirming that their information security practices meet the nuanced demands of modern cloud computing. The SOC2 reports are bespoke to each entity, encapsulating their distinctive operational methodologies and the nature of the services they provide.