One of the main differences between HITRUST and SOC 2 is their scope. HITRUST is specifically designed for healthcare organizations and covers a wide range of security and privacy requirements, while SOC 2 is a more general framework that is applicable to any organization. Additionally, HITRUST incorporates a variety of other frameworks and standards, including HIPAA, NIST, and ISO 27001, while SOC 2 focuses primarily on the AICPA's Trust Services Criteria.