44%
have exactly one confirmed standard
722 companies
476
whose only standard is SOC 2
29% of all listed companies
1.58
confirmed standards on average
across every listed company
Confirmed standards per company
0 confirmed standards176 (11%)
1 confirmed standard722 (44%)
2 confirmed standards511 (31%)
3 confirmed standards162 (10%)
4 or more82 (5%)
Why buyers notice
A single SOC 2 answers one question: did a US audit firm observe these controls over some period. It says nothing about an international management system, privacy, cloud-specific controls, or AI governance. For a vendor review that reaches beyond a US buyer, one report is where the questionnaire starts rather than where it ends.
Companies whose only confirmed standard is SOC 2
| Company | Provider | Confirmed | Shown | ISO 27001 |
|---|---|---|---|---|
| Vanta | 1 | 5 | — | |
| Vanta | 1 | 7 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 7 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 5 | — | |
| Vanta | 1 | 4 | — | |
| Vanta | 1 | 4 | — | |
| Vanta | 1 | 5 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| self-hosted/unknown | 1 | 2 | — | |
| self-hosted/unknown | 1 | 2 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| self-hosted/unknown | 1 | 2 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 4 | — | |
| Vanta | 1 | 3 | — | |
| Oneleet | 1 | 3 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 4 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 4 | — | |
| self-hosted/unknown | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| Secureframe | 1 | 3 | — | |
| Vanta | 1 | 5 | — | |
| Vanta | 1 | 3 | — | |
| self-hosted/unknown | 1 | 3 | — | |
| Oneleet | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 4 | — | |
| Oneleet | 1 | 2 | — | |
| Vanta | 1 | 2 | — | |
| Bastion | 1 | 3 | — | |
| Vanta | 1 | 4 | — | |
| Oneleet | 1 | 2 | — | |
| Vanta | 1 | 5 | — | |
| Vanta | 1 | 3 | — | |
| SafeBase | 1 | 3 | — | |
| self-hosted/unknown | 1 | 6 | — | |
| Vanta | 1 | 3 | — | |
| Oneleet | 1 | 3 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 3 | — | |
| Oneleet | 1 | 2 | — | |
| SafeBase | 1 | 4 | — | |
| Vanta | 1 | 3 | — | |
| Vanta | 1 | 2 | — | |
| Vanta | 1 | 3 | — | |
| SafeBase | 1 | 6 | — | |
| Oneleet | 1 | 2 | — |