SOC 2 readiness scorecard

Five questions. Real grade on where your policies actually stand. Plus the top three gaps to close before your first audit — tailored to your answers, not a generic checklist.

Don't fill:

1. What's your SOC 2 scope?

Security only (Common Criteria) Security + Availability Three or more TSC categories (Security + Availability + Confidentiality/Privacy/PI) Not sure yet

2. How many people at your company?

1–15 16–50 51–150 150+

3. Where does your production infrastructure run?

AWS Google Cloud (GCP) Microsoft Azure Multi-cloud (two or more of the above) Other PaaS (Vercel, Fly, Render, Heroku…) On-prem or unsure

4. What's your identity provider for employee sign-in?

Google Workspace Microsoft 365 / Entra ID Okta JumpCloud Other SSO / IdP (Rippling, Duo, OneLogin, custom…) No central IdP (individual accounts)

5. Where are your policies today?

We don't have any written policies We have a few, but they're incomplete or outdated We have a full kit but no one's reviewed it against SOC 2 Our kit is current and we're preparing for audit We've already completed a Type 1 or Type 2

Your work email (we'll send the detailed breakdown)

We don't spam. We don't resell. One email with your results, one optional follow-up if you want the $997 policy kit. Unsubscribe in one click.

No account required · Results in 2 seconds

—

Where you stand

Top 3 gaps to close

Want the fastest path through?

A tailored 15-policy SOC 2 kit with your cloud, IdP, and headcount pre-filled. Delivered in 72 hours. $997 flat. Full refund if your auditor rejects the kit.

Get your kit — $997

Refund Terms Privacy rob@policydone.io