Who holds which certification

64 vendors · 63 certifications

Which vendors hold SOC 1?

Held by 21 vendors

An auditor's report on controls relevant to customers' financial reporting.

Alibaba Cloud

The cloud arm of Alibaba Group.

Type IIVendor page

read Nov 4, 2026
Confluent

Data streaming on Apache Kafka and Flink.

Type IIVendor page

read Nov 4, 2026
DigitalOcean

Developer cloud: droplets, Kubernetes, managed databases, GPUs.

Type IIVendor page

read Nov 4, 2026
GitHub

Code hosting, Actions and Copilot.

Type IIVendor page

read Oct 28, 2026
Palantir

Foundry, Gotham and the AI Platform (AIP).

Type IIVendor page

read Sep 24, 2026
ServiceNow

IT service management and the Now Platform.

Type IIVendor page

read Sep 24, 2026
Snowflake

The AI Data Cloud: warehouse, lakehouse and Cortex AI.

Type IIVendor page

read Sep 24, 2026
Workday

HR and finance cloud applications.

Type IIVendor page

read Oct 28, 2026
Atlassian

Jira, Confluence and Rovo.

HeldVendor page

read Sep 24, 2026
AWS

Amazon Web Services, the largest public cloud.

HeldVendor page

read Nov 4, 2026
Databricks

The Data Intelligence Platform: lakehouse, Mosaic AI and Unity Catalog.

HeldVendor page

read Sep 24, 2026
Dropbox

File storage, sharing and Dash.

HeldVendor page

read Oct 28, 2026
Fivetran

Managed data movement and ELT.

HeldVendor page

read Nov 4, 2026
Google Cloud

Google Cloud Platform, Workspace and Gemini for Government.

HeldVendor page

read Sep 24, 2026
IBM

IBM Cloud, watsonx and IBM's government cloud services.

HeldVendor page

read Nov 4, 2026
Microsoft

Azure, Microsoft 365 and the Azure OpenAI Service.

HeldVendor page

read Nov 4, 2026
New Relic

Observability platform.

HeldVendor page

read Oct 28, 2026
Oracle

Oracle Cloud Infrastructure and Oracle's cloud applications.

HeldVendor page

read Nov 4, 2026
SAP

ERP, SAP Business Technology Platform and Joule.

HeldVendor page

read Oct 28, 2026
Splunk

Search, observability and SIEM.

HeldVendor page

read Sep 24, 2026
Stripe

Payments infrastructure.

HeldVendor page

read Nov 4, 2026
About SOC 1

Type II covers a period, Type I a single date. Reports are shared under NDA. Evidence: the vendor's own compliance page or trust center naming it, with the sentence kept.

Issued by AICPA (SSAE 18 / ISAE 3402). Also searched as SOC 1 Type II, SSAE 18.

Also in SOC reports: SOC 2, SOC 3