New capabilities, improvements, and fixes to soc2doc — newest first.
New console users are greeted by a short video from Raeganne on their first visit — how your console reads top to bottom and where to start. Skip it if you like; the guided tour follows either way, and you can re-watch the video from your dashboard or the help panel.
The One Plan can now be billed monthly ($999), quarterly ($2,499 — about $833 a month), or annually ($8,999 — about $750 a month). Choose the interval on the pricing page; the plan itself is unchanged.
A blog with an RSS feed, opening with a founder post on why soc2doc exists — written by the practitioner who runs your program, not a content team.
The bell in your console now carries product announcements, marked read the moment you open it. The help panel links into the documentation for the surface you are on and takes feedback directly, alongside the guided-tour replay.
Your dashboard now leads with the short list of things only you can do, and keeps everything we track in its own section. Evidence that needs attention is described as due for a refresh rather than overdue.
The what-you-do and who-you-serve stages of your console now start pre-filled from your SOC 2 report. Everything arrives as a suggestion — confirm or dismiss each item, and the rest of your console builds on what you keep.
Your risk register now keeps every assessment run, so you can show an auditor how a risk's rating moved over time instead of only its latest state.
Tasks now read as an action list — what needs your attention, tied back to the tool where the work actually happens — rather than another tracker to maintain.
Your dashboard now shows, at a glance, which committed controls have missing or stale evidence (older than 18 months) against your next audit date — with a single readiness figure you can drop into your weekly update.
Organizations can now give a contractor or outside auditor read-only access to their dashboard. They see the full control matrix, evidence, and registers, but cannot change anything — every edit is blocked in the interface and on the server.
Clients now sign in with their email — a magic link, no passwords — and see their own control matrix, attach evidence to each control, record who owns what, and switch between every report we hold for their organization.
Upload a SOC 2 report and get every commitment in it mirrored back in plain English, organized by business function. A practitioner verifies the extraction before it reaches you. No score, no checklist — just what you committed to.
A page showing where soc2doc sits on top of the GRC tools and controls you already run — so you can see how it fits before you talk to anyone.
A $99 add-on that permanently deletes your uploaded report and returns a certificate of deletion.
Every upload is gated behind a mutual NDA, and your consent to machine and human review is logged separately with a timestamp.