SOC 2 Type 2 is a framework for evaluating and reporting on the controls and processes of service organizations, particularly those that handle customer data.