Five free SOC 2 templates from our toolkit, mapped to the AICPA Trust Services Criteria, as previews: each opens with its first pages in full and shows the rest blurred, so you can judge the depth before you buy. They cover the system description your auditor tests against, the master security policy, access control, risk assessment and incident response.

What is in the free set

DocumentWhat it is for
SOC 2 System Description Document (preview: first 7 of 18 pages)The system description every SOC 2 report is built on: management’s assertion, organisation overview, service commitments, system boundaries and components.
SOC 2 Information Security Policy (preview: first 7 of 19 pages)The master information security policy, mapped to the Trust Services Criteria, with the policy framework and the core control principles across every security domain.
SOC 2 Access Control Policy (preview: first 5 of 12 pages)Access control requirements from request and approval through provisioning, privileged access, periodic review and removal, on least privilege and need-to-know.
SOC 2 Risk Assessment and Treatment Procedure (preview: first 6 of 13 pages)A repeatable method for identifying, analysing, evaluating and treating information security risks, with scoring scales and acceptance criteria.
SOC 2 Incident Response Procedure (preview: first 8 of 26 pages)How incidents are detected, classified, escalated, contained and recovered, with severity levels, the response team and notification duties.

Get the free SOC 2 templates


We send one confirmation email first — double opt-in, no exceptions. Download links stay live for 14 days. See our privacy policy.

Want the rest?

These five come from the full SOC 2 Toolkit: the system description, controls list and readiness checklist, plus policies and procedures across the Trust Services Criteria. The complete contents list is on the product page.

Free templates for other frameworks