SOC or System and Organizational Control is a suite of reports produced during an audit. SOC 2 Type II compliance applies to all service providers that process and store customer data. These reports from accredited auditors can be used by customers to identify the risks involved in outsourcing a service.