what entities must have a soc report?
A SOC 1 Report (Service Organization Controls Report) is a report on Controls at a Service Organization which are relevant to user entitiesâ internal control over financial reporting.