According to the American Institute of Certified Public Accountants (AICPA), Service Organization Controls (SOC) reports are internal control reports on the services supplied by a service organization providing valuable information that users need to assess and address the risks associated with an outsourced service. In other words, Statement on Standards for Attestation Engagements (SSAE) 18 is used to regulate how companies conduct business, and more specifically it defines how companies report on compliance controls. These reports are called SOC 1, SOC 2, and SOC 3. To learn more about OVHcloud's attestations and certifications, please visit our compliance page.