American Institute of Certified Public Accountants (AICPA SOC3)
Similar to SOC 2, the SOC 3 report is based on the Trust Service Criteria (TSC) established by the Auditing Standards Board of the American Institute of Certified Public Accountants (AICPA). The SOC 3 is a public report that attests to an organization's internal controls over security, availability, processing integrity, and confidentiality.
To keep up with international accounting standards, the AICPA introduced the Statement on Standards for Attestation Engagements No. 18 (SSAE 18), which closely aligns with the International Standard on Assurance Engagements 3402 (ISAE 3402). Both standards enable an objective third-party to report on an organization's controls based on assertions made by that organization. The SOC framework is used to measure the control of financial information.
At NSPECT.IO, we use the Google Cloud Platform for our marketplace and other operations. This platform undergoes regular third-party audits to certify individual products against these standards. As a result, we can provide instant access to our SOC 3 reports for both Google Cloud Platform and Google Workspace.