A SOC 3 report is often considered a redacted SOC 2 report. This SOC 3 report summarizes everything covered in a SOC 2 report, with the only difference being the exclusion of the details of test results and the procedures performed to gain those results. A SOC 3 report can only be developed and received if a SOC 2 has been completed. 

 The major differentiation between SOC 3 and SOC 2 reports is that the former can be posted on your website, while the latter can only be shared with an NDA.

 You can read more about SOC 2 reports by clicking here.

See Scrut in action!