← All infographics
SOC 2 · Trust Services

AICPA Trust Services Criteria

The five AICPA Trust Service Criteria that SOC 2 reports are built on.

SecurityProtects information and systems from unauthorised access, use, disclosure, disruption, modification or destruction. The one mandatory (Common) criterion.
AvailabilityEnsures systems, products and services are available for operation and use as committed or agreed.
Processing IntegrityEnsures system processing is complete, valid, accurate, timely and authorised.
ConfidentialityProtects information designated as confidential from unauthorised disclosure.
PrivacyAddresses the collection, use, retention, disclosure and disposal of personal information.
Cianaa Technologies — independent PCI, ISO & SOC assessments across NZ & AU.Book a scoping call →