Skip to content
← Glossary

Entropy scoring & verification

SOC 2 (Type I / Type II)

An independent auditor’s report on a company’s security controls. Type II covers controls operating effectively over a period of months, not just a single point in time — a stronger signal than Type I. Entropy’s Governance score credits a verified SOC 2 Type II report; Type I is not scored on its own.

More: Why an early-stage vendor may not have SOC 2 yet