Glossary
SOC 2
An attestation on a vendor's security controls.
SOC 2 is an American Institute of CPAs attestation about a vendor's controls for security, availability, processing integrity, confidentiality, and privacy. SOC 2 Type II covers those controls over a period (typically 6–12 months) and is a useful — but not universal — signal for AI scribes handling PHI. A signed BAA and documented HIPAA safeguards remain the practical baseline.