While SOC1 focuses on controls relevant to financial reporting, SOC2 and SOC3 reports assess controls related to security, availability, processing integrity, confidentiality, and privacy. SOC2 is specifically designed for technology service providers, while SOC3 is a summarized version of SOC2 that can be freely distributed to a wider audience