Alloy’s latest SOC 2 Type 2 report is published in the Alloy Trust Portal once the audit is complete. The Trust Portal is the primary location for the latest standard due diligence documents.
When the new report is available
SOC 2 Type 2 reports cover a one-year audit period typically starting May 1 the prior year through April 30 the current year.
Historically, the updated report becomes available around mid-June, shortly after the April 30 reporting period ends.
A SOC 2 report does not have a simple “published on” date that determines whether it is current. To identify the latest report, review the audit period stated in the report and select the report covering the most recent completed period.
How to access the report
Go to trust.alloy.com.
Select Request Access or Regain Access if you have not previously accessed the portal.
Provide the email address associated with your business.
If you are a Third Party completing due diligence on behalf of a financial institution, you will need to provide a Letter of Authorization to [email protected].
Click View All Resources and find the Alloy SOC 2 Type 2 document.
Trust Portal access requests may take up to 24 hours to be approved. If you do not receive an email, check your spam or junk folder and confirm that you used the correct email address.
How do I request a bridge letter?
A bridge letter may be requested when the latest SOC 2 audit period has ended but the new report has not yet been published. Once the new report is available and covers the period requested by the customer’s third-party risk team, a bridge letter is generally not needed.
If your auditor or risk team specifically requires a bridge letter, submit the request to Alloy Support with the required coverage period and due date. Support will coordinate with the appropriate internal team.