Requirements & Confidentiality
Please note that an ISAE 3402 or SOC 1 report is a confidential report and in the company register will only be registered that your organization has an ISAE 3402 or SOC 1 report in place and what type the report is.
-1r7oei.png)
The purpose of the ISAE 3402 register is to inform which organizations have an ISAE 3402 assurance report. User organizations in particular find it important to have insight into which organizations have such a report. The GRC Foundation collects, classifies and publishes about this. A substantive ISAE 3402 report is not public, which is why these reports themselves are not published on the website. Considering that SOC 1 reports have the same scoping and value as an ISAE 3402 report, SOC 1 reports are also registered.
Please note that an ISAE 3402 or SOC 1 report is a confidential report and in the company register will only be registered that your organization has an ISAE 3402 or SOC 1 report in place and what type the report is.
