{"id":7995,"date":"2022-12-01T22:43:00","date_gmt":"2022-12-01T22:43:00","guid":{"rendered":"https:\/\/medstack.co\/?page_id=7995"},"modified":"2025-10-03T19:24:09","modified_gmt":"2025-10-03T19:24:09","slug":"soc-2","status":"publish","type":"page","link":"https:\/\/medstack.co\/soc-2\/","title":{"rendered":"Learn About SOC 2"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

SOC 2 Compliance Automation Software for Digital Healthcare<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Learn about SOC 2<\/i><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

SOC 2 is a compliance standard (not a certification) that specifies how companies should manage general customer data. SOC 2 guidelines are built on five sets of standards.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"AICPA\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is SOC 2?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

SOC 2 (Service Organization Control) is the standard of the AICPA that is widely considered the benchmark for trust in the cloud industry.<\/p>

\u00a0<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat are the trust services criteria of SOC 2?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Confidentiality<\/strong>
Confidential information is protected.

<\/p>

Privacy<\/strong>
Personal information is collected, used, retained, disclosed, and disposed of in accordance with pre-stated policies. Unlike the confidentiality section, the privacy section only applies to personal information.

Availability<\/strong>
Your information and systems are available for operation and use.

Processing integrity<\/strong>
System processing is complete, valid, timely, authorized, and accurate. Throughout the course of data processing, customer data remains correct.

Security<\/strong>
Your systems and the data you store are protected against unauthorized disclosure and unauthorized access.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow many types of SOC 2 compliance exist?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

There are two types of SOC 2 compliance \u2013 Type 1 and Type 2.<\/p>

Type 1 is point in time, whereas Type 2 is assessed over a period of time, and therefore more difficult to achieve.<\/p>

\u00a0<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhy is SOC 2 important?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Demonstrating that you\u2019re SOC 2 compliant is important because it demonstrates that your company has adequate, effective controls in place to govern how information is handled within the business.<\/p>

This is a more reliable process than simply giving your word to enterprise clients that you have sufficient security protocols in place to protect sensitive general data, since a SOC 2 audit has specific requirements and is performed by an independent third-party auditor.<\/p>

In turn, this adds tangible credibility to the security features that your company has in place.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs SOC 2 compliance mandatory?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

SOC 2 is a voluntary compliance standard, however that doesn\u2019t mean your company won\u2019t need it.<\/p>

Some enterprise clients that deal with large volumes of data may require partnering companies to remain SOC 2 compliant, in order to ensure every possible protection is in place to secure their confidential data and prevent data leaks.<\/p>

It may be a mandatory requirement for future partnerships, so it\u2019s a good idea to ensure that your business remains SOC 2 compliant.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWho must comply with SOC 2?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

Organizations that work in service and either process or store sensitive client data should consider a SOC 2 audit and maintain compliance.<\/p>

Because SOC 2 has been largely accepted as an important part of the United States standard for information security, the number of companies being asked to undergo a SOC 2 assessment and remain SOC 2 compliant continues to grow on an annual basis.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is a SOC 2 audit?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

A SOC 2 audit report offers in-depth information about how well a service organization is meeting the five SOC 2 sets of standards: confidentiality, security, processing integrity, privacy controls, and availability.<\/p>

The audit should be performed by a licensed CPA firm, or if a third-party company that isn\u2019t CPA licensed is performing the audit, they must have a CPA firm sign-off on the audit after it\u2019s completed.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow do I become SOC 2 compliant?<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t

If you\u2019re interested in your business becoming SOC 2 compliant, you\u2019ll need to hire a third-party auditor to visit your business and perform a SOC 2 audit.<\/p>

A useful first step towards getting SOC 2 compliant is signing up to use the MedStack platform for your business, since we take steps to ensure the SOC 2 compliance process goes as smoothly as possible for your company.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How can MedStack help with\u00a0compliance\u00a0<\/i>?<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Annual Report<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

MedStack does an annual Type 2 SOC 2 report, which covers our entire platform. We achieved Type 1 compliance in January of 2020, and Type 2 compliance in September of 2020 and more recently in 2024.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Inheritable Security Controls<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The security controls referenced in our SOC 2 reports are inheritable by our customers, which means that anyone using the MedStack platform for their business will be SOC 2 compliant.<\/p>

\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Day 1 Evidence<\/span><\/span>
<\/div><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For companies that need to become SOC 2 compliant across their own business, 60% of the controls necessary for SOC 2 compliance are already complete by running on the MedStack platform. We can provide evidence of that level of compliance on day one.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Save Costs and Time<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For the remainder, companies require an auditor to fulfill the remaining requirements for full SOC 2 compliance (i.e., site visit, personnel and administrative requirements, etc.), which would still result in achieving full SOC 2 compliance at a fifth of the cost and time.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Learn how our platform can help you become SOC 2\u00a0compliant<\/i><\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

We are the only platform that brings together compliance, security assessment responses, threat protection, and audit readiness into a complete offering, ensuring your application runs and manages data in the cloud with the highest privacy and security standards in mind.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\tFOR BUSINESS<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\tFOR OPERATIONS<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\tFOR DEVELOPERS<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Ready to join our MedStack Community <\/i>?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Book a demo today and see how easy it is to get started with MedStack.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\tBOOK A DEMO<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Learn\u00a0More<\/i><\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Check out a few of our resources to learn more about SOC 2.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"SOC\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"AICPA\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"AICPA\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

SOC 2 Compliance Automation Software for Digital Healthcare Learn about SOC 2 SOC 2 is a compliance standard (not a certification) that specifies how companies should manage general customer data. SOC 2 guidelines are built on five sets of standards. Frequently Asked Questions What is SOC 2? SOC 2 (Service Organization Control) is the standard […]<\/p>\n","protected":false},"author":22,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-7995","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nWhat Is SOC 2? Everything You Need To Know | MedStack<\/title>\n<meta name=\"description\" content=\"Understand SOC 2 and its significance in ensuring data security and privacy. Learn about the framework, controls, and certification process.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/medstack.co\/soc-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is SOC 2? Everything You Need To Know | MedStack\" \/>\n<meta property=\"og:description\" content=\"Understand SOC 2 and its significance in ensuring data security and privacy. Learn about the framework, controls, and certification process.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/medstack.co\/soc-2\/\" \/>\n<meta property=\"og:site_name\" content=\"MedStack\" \/>\n<meta property=\"article:modified_time\" content=\"2025-10-03T19:24:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/medstack.co\/wp-content\/uploads\/2022\/12\/Logos-04.png\" \/>\n\t<meta property=\"og:image:width\" content=\"504\" \/>\n\t<meta property=\"og:image:height\" content=\"501\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/\",\"url\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/\",\"name\":\"What Is SOC 2? Everything You Need To Know | MedStack\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/medstack.co\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/medstack.co\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Logos-04.png\",\"datePublished\":\"2022-12-01T22:43:00+00:00\",\"dateModified\":\"2025-10-03T19:24:09+00:00\",\"description\":\"Understand SOC 2 and its significance in ensuring data security and privacy. Learn about the framework, controls, and certification process.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/medstack.co\\\/soc-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/medstack.co\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Logos-04.png\",\"contentUrl\":\"https:\\\/\\\/medstack.co\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/Logos-04.png\",\"width\":504,\"height\":501,\"caption\":\"AICPA SOC\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/medstack.co\\\/soc-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/medstack.co\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Learn About SOC 2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/medstack.co\\\/#website\",\"url\":\"https:\\\/\\\/medstack.co\\\/\",\"name\":\"MedStack\",\"description\":\"Healthcare security and privacy compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/medstack.co\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/medstack.co\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/medstack.co\\\/#organization\",\"name\":\"MedStack\",\"url\":\"https:\\\/\\\/medstack.co\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/medstack.co\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/medstack.co\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/NE_medstack-logo-horizontal-white-e1673712333333.png\",\"contentUrl\":\"https:\\\/\\\/medstack.co\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/NE_medstack-logo-horizontal-white-e1673712333333.png\",\"width\":530,\"height\":90,\"caption\":\"MedStack\"},\"image\":{\"@id\":\"https:\\\/\\\/medstack.co\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Is SOC 2? Everything You Need To Know | MedStack","description":"Understand SOC 2 and its significance in ensuring data security and privacy. Learn about the framework, controls, and certification process.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/medstack.co\/soc-2\/","og_locale":"en_US","og_type":"article","og_title":"What Is SOC 2? Everything You Need To Know | MedStack","og_description":"Understand SOC 2 and its significance in ensuring data security and privacy. Learn about the framework, controls, and certification process.","og_url":"https:\/\/medstack.co\/soc-2\/","og_site_name":"MedStack","article_modified_time":"2025-10-03T19:24:09+00:00","og_image":[{"width":504,"height":501,"url":"https:\/\/medstack.co\/wp-content\/uploads\/2022\/12\/Logos-04.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/medstack.co\/soc-2\/","url":"https:\/\/medstack.co\/soc-2\/","name":"What Is SOC 2? Everything You Need To Know | MedStack","isPartOf":{"@id":"https:\/\/medstack.co\/#website"},"primaryImageOfPage":{"@id":"https:\/\/medstack.co\/soc-2\/#primaryimage"},"image":{"@id":"https:\/\/medstack.co\/soc-2\/#primaryimage"},"thumbnailUrl":"https:\/\/medstack.co\/wp-content\/uploads\/2022\/12\/Logos-04.png","datePublished":"2022-12-01T22:43:00+00:00","dateModified":"2025-10-03T19:24:09+00:00","description":"Understand SOC 2 and its significance in ensuring data security and privacy. Learn about the framework, controls, and certification process.","breadcrumb":{"@id":"https:\/\/medstack.co\/soc-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/medstack.co\/soc-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medstack.co\/soc-2\/#primaryimage","url":"https:\/\/medstack.co\/wp-content\/uploads\/2022\/12\/Logos-04.png","contentUrl":"https:\/\/medstack.co\/wp-content\/uploads\/2022\/12\/Logos-04.png","width":504,"height":501,"caption":"AICPA SOC"},{"@type":"BreadcrumbList","@id":"https:\/\/medstack.co\/soc-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/medstack.co\/"},{"@type":"ListItem","position":2,"name":"Learn About SOC 2"}]},{"@type":"WebSite","@id":"https:\/\/medstack.co\/#website","url":"https:\/\/medstack.co\/","name":"MedStack","description":"Healthcare security and privacy compliance","publisher":{"@id":"https:\/\/medstack.co\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/medstack.co\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/medstack.co\/#organization","name":"MedStack","url":"https:\/\/medstack.co\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medstack.co\/#\/schema\/logo\/image\/","url":"https:\/\/medstack.co\/wp-content\/uploads\/2022\/10\/NE_medstack-logo-horizontal-white-e1673712333333.png","contentUrl":"https:\/\/medstack.co\/wp-content\/uploads\/2022\/10\/NE_medstack-logo-horizontal-white-e1673712333333.png","width":530,"height":90,"caption":"MedStack"},"image":{"@id":"https:\/\/medstack.co\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/pages\/7995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/users\/22"}],"replies":[{"embeddable":true,"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/comments?post=7995"}],"version-history":[{"count":10,"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/pages\/7995\/revisions"}],"predecessor-version":[{"id":16011,"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/pages\/7995\/revisions\/16011"}],"wp:attachment":[{"href":"https:\/\/medstack.co\/wp-json\/wp\/v2\/media?parent=7995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}