Free toolkit
The SOC 2 Evidence Kit
Running the controls is one thing; proving you run them is where SOC 2 gets slow. This kit is the concrete answer to "what do I actually upload?": 25 controls and 76 evidence items mapped to the Trust Services Criteria, as a checklist you can work through today.
What's inside
- 25 canonical controls, grouped into 8 domains
- 76 concrete evidence items: the specific artifacts an auditor expects
- Every control mapped to the SOC 2 Trust Services Criteria it satisfies
- A CSV with Status, Owner, and Evidence-link columns to run the whole thing
- Crosswalked, so most of it also counts toward ISO 27001, HIPAA, and PCI DSS
Prefer to browse first? Read the full kit on the web, no email needed.
The honest part
These controls and evidence types are the same ones Keel ships in-product. The checklist is generated from our authored library, not padded to look bigger. Do the work once and, because everything is crosswalked, most of it carries into your next framework. That's the whole idea: collect once, comply everywhere.