# SOC 2 Compliance in Weeks, Not Months > Secureframe streamlines the SOC 2 process at every step of the way. Get SOC 2 compliance within weeks with powerful security that's seamless and easy-to-use. canonical: https://secureframe.com/frameworks/soc-2 ## Securely manage your customer data SOC 2 is a cybersecurity compliance framework developed for service and technology providers that handle customer data. SOC 2 drives organizations to build strong, continuous security processes to protect their customer data and build trust. #### There are two types of SOC 2: Type I and Type II. - #### SOC 2 Type I — Point in time — Assesses the design and implementation of security processes at a specific point in time. - #### SOC 2 Type II — 3 - 12 months — Assesses the effectiveness of security processes by observing operations over a period of at least 3 months, with 12 months recommended. ## Seamless SOC 2 Compliance Secureframe simplifies SOC 2 audits by condensing 200+ controls into 8 key steps. Save time, enhance security, and achieve compliance effortlessly. - #### All-in-one compliance automation — Create your policies, train your employees, secure your cloud, and manage risks all in one platform. - #### Dedicated audit support — Make sure you get a clean SOC 2 report with guidance from our team of experts. - #### Continuous monitoring — Ensures you have the right controls in place, even after your audit. ### We’re ready to **help** ## How it works The average SOC 2 has more than 200 security controls to implement. We’ve automated and streamlined them into eight key steps—saving you hundreds of hours and enabling best-in-class security and privacy compliance practices - ### Meet your dedicated account manager - ### Scan and secure your cloud infrastructure - ### Create your compliance policies - ### Easily train personnel on security and privacy requirements - ### Assess and manage vendor risk - ### Complete Secureframe SOC 2 readiness assessment - ### Complete a SOC 2 audit - ### Continually maintain SOC 2 compliance ## Ready to secure your SOC 2? - ### Scan and secure your cloud infrastructure automatically — We connect with, monitor, and help configure your cloud infrastructure to be SOC 2 compliant. Plus, no need to install agents — we scan through read-only access. #### Key Benefits - Monitor 150+ cloud services including AWS, Google Cloud, and Azure - Review vulnerabilities through our dashboard with associated risk scores and details - ### Assess and manage vendor risk — We make it simple for you to complete vendor risk assessments, regularly review vendors, and complete required due diligence. #### Key Benefits - Perform and manage vendor risk assessments - Store, manage, and review vendor security certifications and reports for SOC 2, ISO 27001, PCI DSS, CCPA, and GDPR - ### Build your own compliance policies — We help you design SOC 2 security policies that are right for your business. Select from our library of policies, adapt them for your organization, and publish to your employees — all through the Secureframe platform. #### Key Benefits - Access dozens of policies developed and vetted by our in-house security experts and former auditors - Easily publish to your employees for review and acknowledgment through the Secureframe platform - ### Easily onboard and offboard your employees — Our workflows streamline the onboarding and offboarding process for your employees. Easily track that your designated in-scope personnel have completed background checks, security awareness training, and acceptance of security policies — all through our employee dashboard. #### Key Benefits - Accelerate employee onboarding with our automated self-serve process - View employee progress across all assigned tasks through our reports and dashboards - ### Stay compliant with continuous monitoring and automated evidence collection — We help you maintain [SOC 2 compliance](https://secureframe.com/hub/soc-2) by continuously monitoring your compliance environment and notifying personnel when regular tasks are due. Ensure security and privacy compliance requirements are being met with real-time alerts on nonconformities across your tech stack — so that you can fix them quickly. #### Key Benefits - Automatic control testing via continuous configuration data collection from 150+ integrations - Seamless auditor evidence collection workflows and fieldwork processes #### “Having our SOC 2 report in hand has been pivotal in unlocking new business opportunities and significantly accelerating our sales cycle. Instead of spending valuable time answering a 10-page security questionnaire, we can simply share our SOC 2 Type II report to underscore our commitment to security and compliance. Our SOC 2 Type II gives us a significant edge over our competition and Secureframe’s automation solution was essential in helping YARDZ achieve this crucial SOC 2 report.” ## Easily unlock new frameworks Secureframe’s automated compliance platform has a common control layer that makes it easy to apply the same controls you have completed to additional frameworks, so you can save time meeting new standards. #### Obtaining SOC 2 compliance gives you a jumpstart to these other frameworks with Secureframe-authored common controls: - ISO27001 - NIST - HIPAA ### Let’s get started **together** #### The Ultimate Guide to SOC 2 Get an overview of SOC 2 compliance and why it’s important, the difference between SOC 2 Type I and Type II, how long it takes to get a report, what the costs are, and how to get prepared for an audit fast. ## End-to-end compliance right at your fingertips Automated tests, continuous monitoring, and risk management with the support you need — all in one place. - #### Spend less time on compliance — Quickly obtain a clean SOC 2 report and strengthen your security posture with automated evidence collection and real-time monitoring. — Explore Comply - #### Use security as a launchpad — Demonstrate your security posture and save time responding to security questionnaires to build customer confidence and accelerate sales. — Explore Trust