Your customers rely on your services. Prove to them you are up to the challenge with a System and Organization Control (SOC) report.


With the increase in outsourcing comes an increased need for transparency. You need to be able to assure your stakeholders and your customers that your operations, processes and results are on the up-and-up.

A Service Organization Controls (SOC) engagement from Copeland Buhl provides your customers and prospects assurance that controls over IT security, data availability, processing integrity, confidentiality, financial reporting and privacy are properly in place. Using a rigorous approach, we get to know your organization’s processes and operations, collecting and evaluating all the necessary documentation. Our CPAs and IT experts work together to deliver an SOC report that meets the standards set by the AICPA. Benefits of an SOC engagement include:

  • Demonstrate your internal controls are in place and functioning correctly
  • Show customers the seriousness with which you take security and confidentiality
  • Provide additional financial statement validity
  • Provide a report for customers on important non-financial data

With complete SOC 1-3 capabilities, our reports can be customized to fit your needs:


  • Relates to controls that are relevant to the user’s control over financial reporting
  • Provides a detailed report for financial statement auditor or stakeholders
  • Evaluates financial transaction processing systems
  • Type 1 and Type 2 engagements available


  • Can apply to any system, not just financial
  • Report on any of the following: security, availability, confidentiality, processing integrity, privacy
  • Includes infrastructure, software, people, procedures and data
  • Provides a detailed final report meant for restricted use
  • Type 1 and Type 2 engagements available


  • Marries the SOC 2 requirements with HITRUST requirements
  • One assessment is performed and requirements for both SOC and HITRUST are met
  • The SOC 2 + HITRUST report is an efficient method of reporting to meet the widest range of requests
  • SOC2 + HITURST saves time and money


  • Same focus as SOC 2
  • Provides a short report and a report for general distribution
  • An unrestricted and public-facing report that allows you to use a seal on your website

Contact us today for an SOC engagement that can give your customers and stakeholders the assurance they need.