SOC 2 template · Type I and Type II
Privacy Policy
Describes how the organization handles personal information. Written for your company, citing the controls below.
- Sections
- 8
- Controls cited
- 9
- Formats
- PDF, Word
- Shelf
- 22 SOC 2documents in all
No card needed to start.
SOC 28 sections
Privacy PolicyDescribes how the organization handles personal information.
- Cites
- P1.1, P3.1, P4.1 and 6 more
- Formats
- PDF and Word
SOC 2 shelf
Sections
Each written around your company: your tools, your roles, your review dates.
- Introduction
- Information We Collect
- How We Use Information
- Information Sharing
- Data Retention
- Data Security
- Your Rights
- Contact Information
Controls it cites
The SOC 2 controls first, then the matching controls in other frameworks.
- P1.1Privacy: NoticeSOC 2
- P3.1Privacy: Choice & ConsentSOC 2
- P4.1Privacy: CollectionSOC 2
- P6.1Privacy: DisclosureSOC 2
- GDPR Art. 12Transparent CommunicationGDPR
- GDPR Art. 13Information at CollectionGDPR
- CCPA §1798.100§1798.100: Consumer Right to KnowCCPA
- CCPA §1798.110§1798.110: Right to Know CategoriesCCPA
- P8.1Privacy: QualitySOC 2
- SOC 28 sections
Employee Onboarding and Offboarding Policy
CitesCC1.4 CC6.2 CC6.3 +5 +6PDF · WordCites CC1.4, COSO Principle 4: Competence Commitment (SOC 2); CC6.2, Logical & Physical Access: Credentials (SOC 2); CC6.3, Logical & Physical Access: Authorization (SOC 2), and 5 more. - SOC 27 sections
Physical Security Policy
CitesCC6.4 ISO A.7.1 ISO A.7.2 +3 +4PDF · WordCites CC6.4, Logical & Physical Access: Physical Restrictions (SOC 2); ISO A.7.1, Physical Security Perimeters (ISO 27001); ISO A.7.2, Physical Entry (ISO 27001), and 3 more. - SOC 27 sections
Network Security Policy
CitesCC6.6 CC6.7 ISO A.8.20 +3 +4PDF · WordCites CC6.6, Logical & Physical Access: External Threats (SOC 2); CC6.7, Logical & Physical Access: Transmission Security (SOC 2); ISO A.8.20, Networks Security (ISO 27001), and 3 more. - SOC 27 sections
Encryption Policy
CitesCC6.1 CC6.7 ISO A.8.24 +5 +6PDF · WordCites CC6.1, Logical & Physical Access: Security Software (SOC 2); CC6.7, Logical & Physical Access: Transmission Security (SOC 2); ISO A.8.24, Use of Cryptography (ISO 27001), and 5 more. - SOC 27 sections
Logging and Monitoring Policy
CitesCC7.1 CC7.2 CC4.1 +7 +8PDF · WordCites CC7.1, System Operations: Detection Mechanisms (SOC 2); CC7.2, System Operations: Monitoring (SOC 2); CC4.1, COSO Principle 16: Monitoring Activities (SOC 2), and 7 more. - SOC 26 sections
Asset Management Policy
CitesCC6.1 CC6.5 ISO A.8.1 +3 +4PDF · WordCites CC6.1, Logical & Physical Access: Security Software (SOC 2); CC6.5, Logical & Physical Access: Asset Disposal (SOC 2); ISO A.8.1, User Endpoint Devices (ISO 27001), and 3 more.
SOC 2 on its own
- Documents
- 22
- Plan
- Growth
- Price
- $199 a month or $1,990 a year
Growth also covers HIPAA, so SOC 2 + HIPAA stays at $199 a month. Two frameworks besides HIPAA need Scale.
Your first policy is free. No card needed to start.