SOC 2 attestation reports, available under NDA

Compliance · How to request Netspective’s SOC 2 Type 1 and Type 2 reports

Netspective’s SOC 2 Type 1 and Type 2 reports are attestation reports issued by an independent CPA firm under the AICPA’s attestation standards. They are not certifications. We share them with prospective and current clients under a nondisclosure agreement.

Request the reports by email → Use the contact page

What the two reports cover

SOC 2 Type 1. The CPA firm’s opinion on whether Netspective’s controls were suitably designed at a point in time.
SOC 2 Type 2. The CPA firm’s opinion on whether those controls operated effectively over a review period.

Both are measured against the AICPA Trust Services Criteria. Each report states which criteria it covers and, for Type 2, the period it reviewed; read those sections before relying on it.

How to request them

Email sales@netspective.com with your name, organization and role, and the engagement or evaluation the reports are for.
We send our mutual nondisclosure agreement, or review yours.
Once it is signed, we share the current reports with the people it names.

What the reports do not say

The reports describe Netspective’s own controls. They do not attest to a system built in your cloud tenant, and there is no HIPAA certification for any party to hold. For a data lake in your own tenant, each control is split between your cloud provider, your organization and Netspective, as the shared-responsibility table sets out.