{"page":"/blog/soc-2-ad-tech","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Report","Question it answers","Who usually gets it","Example"],"rows":[["SOC 1","Are controls relevant to customers' financial reporting designed and working?","Customers' finance teams and their auditors","AWS publishes SOC 1 quarterly (AWS SOC FAQ)"],["SOC 2","Do controls meet the Trust Services Criteria chosen for the report?","Customers with a business need","AWS SOC 2 covers security, availability, confidentiality and privacy (AWS SOC FAQ)"],["SOC 3","A short public version of the SOC 2 opinion","Anyone","AWS posts its SOC 3 publicly (AWS SOC FAQ)"]],"sourceUrls":[["https://aws.amazon.com/compliance/soc-faqs/"],["https://aws.amazon.com/compliance/soc-faqs/"],["https://aws.amazon.com/compliance/soc-faqs/"]]}