How to generate a SOC2 -Type2 Compliance report

How to get the SOC2 Type2 report and how to read its expiration date? 

Organization Control 2 (SOC2)

Navigate to Trust Centre and click Request a Compliance Report

• fill your Company data
• select the select a Security Compliance Report type
• submit the request 

Once the request is submitted, there will be a total of 3 emails sent. 

1. Email sent to the mentioned email address to sign "SOC2 Non-Disclosure Agreement"
2. Once the NDA is signed, there will be another email sent with the password 
3. The final email will have the link to access/download the SOC2 report in the pdf form

Note: PDF file will be password protected. 

How to read the expiration date of a report?

A SOC-2 report reflects an observation date of one year. The report is written about 30 days after that observation period. It is good for the following 365 days as the next observation period begins.

• This is a generic link to get the SOC2 report for all the products from Palo Alto Networks.
• There is no option to get the report for a specific tenant. The report is at the product level

Team bidresponse@paloaltonetworks.com is responsible for managing a workflow that allows the reports to be sent out.

Team cloud_certifications@paloaltonetworks.com is involved with the certification process and maintains the report database.