Soc2 Compliance

Handles SOC 2 compliance documentation and audit prep, which is the kind of thing you need when you're selling to enterprises but would rather be shipping features. It'll help you structure your security controls, maintain evidence files, and generate the documentation auditors expect to see. The reality is SOC 2 is mostly about proving you do what you say you do, so this gives you templates and workflows to track policies, access reviews, and incident response without starting from scratch. Useful if you're going through your first audit or trying to maintain compliance without hiring a full-time GRC person.

skills.sh installs: 669
GitHub stars: 29.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add alirezarezvani/claude-skills --skill soc2-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

SOC 2 Compliance

SOC 2 Type I and Type II compliance preparation for SaaS companies. Covers Trust Service Criteria mapping, control matrix generation, evidence collection, gap analysis, and audit readiness assessment.

Overview
Trust Service Criteria
Control Matrix Generation
Gap Analysis Workflow
Evidence Collection
Audit Readiness Checklist
Vendor Management
Continuous Compliance
Anti-Patterns
Tools
References
Cross-References

Overview

What Is SOC 2?

SOC 2 (System and Organization Controls 2) is an auditing framework developed by the AICPA that evaluates how a service organization manages customer data. It applies to any technology company that stores, processes, or transmits customer information — primarily SaaS, cloud infrastructure, and managed service providers.