SOC 2 Type 2 is a compliance standard for evaluating a company’s information security practices. It assesses how well an organization implements and maintains controls related to the security, availability, processing integrity, confidentiality, and privacy of customer data. The "Type 2" report includes both a description of the controls and an auditor's evaluation of their effectiveness based on real-time operation over the audit period.