SOC 2 Readiness Assessment
Evaluate your technical and organizational controls against the AICPA Trust Services Criteria. Receive an instant readiness score, custom 5-axis SVG radar chart, and prioritized gap remediation checklist.
Loading AICPA Trust Services Criteria question bank...
Assessment Methodology & FAQs
How our scoring engine, Trust Services Criteria mapping, and privacy protections work.
How does the SOC 2 readiness assessment work?
You start by choosing your audit scope (Security is always mandatory; Availability, Processing Integrity, Confidentiality, and Privacy can be added). You then evaluate your operational controls across 4 maturity levels (Not started, Ad hoc, Defined, Managed) or mark questions as Not applicable. The tool immediately calculates your readiness percentage and highlights highest-leverage gap remediation tasks.
Which Trust Services Criteria should I select?
Security (Common Criteria) is mandatory for every SOC 2 audit. If your SaaS contracts make formal uptime commitments (SLA), select Availability. If you execute financial transactions or complex algorithmic data transformations, add Processing Integrity. If you store sensitive IP or confidential business documents under NDAs, add Confidentiality. Add Privacy only if you store customer PII or personal data.
How is my readiness score calculated?
For each criterion, the score equals the sum of (answered value × weight) divided by the maximum possible score (3 × weight) for applicable controls. Overall readiness is the unweighted average of all in-scope criteria percentages. Questions marked "Not applicable" are excluded from both numerator and denominator.
Are my company's answers private and secure?
Yes, 100%. All computations run completely within your browser's local JavaScript runtime. No responses, scores, or identifiers are transmitted to our servers or any third-party analytics. Answers are cached in your local browser localStorage so you can resume anytime.
Can I save my progress and resume later?
Yes. Your responses automatically persist in your browser's localStorage under the key soc2_assessment_v1. When you revisit or refresh this page on the same browser, your progress will restore automatically.
Does this assessment replace a SOC 2 audit by a licensed CPA firm?
No. SOC 2 is an independent attestation report that can only be performed and issued by an independent, accredited CPA firm. This tool provides a self-assessment readiness estimate and evidence roadmap to help you prepare before spending tens of thousands of dollars on CPA audit fieldwork.