About socthree

socthree is a free, searchable index of every publicly published SOC 3 report we can find. Search a company once and get the report, the auditor, the audit period, and a direct link to the source — instead of chasing it down on a vendor's trust page.

Why this is legitimate

A SOC 3 is, by AICPA design, a general-use, public document — unlike the NDA-gated SOC 2. Indexing and linking publicly published SOC 3s is collecting public information, like a directory. We only list SOC 3 reports: never SOC 2 reports, bridge letters, or anything marked confidential.

How data gets in

Reports arrive from public submissions and automated discovery — and every single one passes through human moderation before publishing. Each listing always shows the canonical source URL and when we last verified it.

Corrections and takedowns

Every report page has a “Report an issue” action for wrong links, outdated reports, and takedown requests — we act on these quickly. See Legal & takedown for the policy.

Missing a report?

Submit it and we'll review and add it.