Our Mission
SOC 2 Gap was founded to solve a pervasive problem in B2B SaaS: the compliance gatekeeping that blocks startups from closing their first enterprise customers.
Preparing for a SOC 2 audit has traditionally required either tens of thousands of dollars in advisory consulting fees or handing over sensitive architecture diagrams and corporate email addresses to compliance software sales teams. We built SOC 2 Gap to provide every engineering team with a free, mathematically rigorous, and completely private self-assessment tool.
SOC 2 Gap is operated by Brahm Kamal Tech.
Our Independence Declaration
Trust in security and compliance tooling requires uncompromising editorial and algorithmic independence. We operate under strict principles:
- Zero vendor ownership: We are not owned, funded, or controlled by any compliance automation vendor, CPA firm, or venture capital fund with compliance investments.
- Zero sponsored scores: Our assessment question bank, weights (1 to 3), maturity formulas, and gap priorities are derived directly from AICPA Trust Services Criteria 2022 points of focus and cannot be altered by vendor partnerships.
- Assessment engine non-steering: The assessment engine never recommends specific commercial software platforms based on your answers or scores.
- Browser-only data privacy: Your answers, control states, and gap reports never leave your device. We do not store or transmit any assessment inputs to any server.
How We Fund This Resource
SOC 2 Gap is free to use without subscriptions, paywalls, or email gates. To fund research, development, and hosting, we participate in affiliate referral programs with select compliance automation software providers on dedicated comparison pages.
When you click an affiliate comparison link and subsequently purchase a vendor subscription, we may receive a commission. This relationship is always disclosed transparently on relevant pages above the first link. It does not affect our scoring math, and our assessment engine never steers users toward sponsored solutions.
No Invented Credentials
We believe in radical transparency. You will not find fabricated executive bios, stock photo "cybersecurity experts," or fictional customer testimonials on this site. Our question bank and evidence guidelines are grounded entirely in public AICPA Trust Services Criteria documentation and standard audit practice.
Explore Our Free Tools
Ready to evaluate your technical controls or audit progress?