What SOC 2 is
A SOC 2 report attests a service organisation against the AICPA Trust Services Criteria, across security, availability, processing integrity, confidentiality and privacy. The common criteria lean heavily on change management, access control and continuous monitoring.
SecurityAvailabilityProcessing integrityConfidentialityPrivacy
What Alexus gives you
The operational evidence underneath SOC 2.
One change record across your ITSM and code, so every change is captured with who approved it.
Access and ownership mapped per system, to support periodic access reviews.
Monitoring and alerting signals reconciled into one health view, where no signal never reads as healthy.
An asset and dependency inventory that stays current, so the system description matches reality.
Supplier and vendor context drawn from the services your estate actually depends on.
Honest about today
The SOC 2 control mapping and auditor-ready exports are on the roadmap. What exists today is the operational evidence underneath them: the change record, access view, monitoring and inventory. We will not claim SOC 2 outputs are done before they are.
Alexus does not make you SOC 2 compliant. It provides operational evidence for the parts of the framework that depend on knowing your systems, incidents and changes.