SOC 1 (SSAE 18)
Controls over financial reporting, evidenced
The SOC 1 (SSAE 18) report your customers’ auditors ask for when your service affects their financial statements. Build a library of control objectives and the controls that meet them, run Type I and Type II periods, draft the system description, and track readiness — reusing the same evidence and audit trail as the rest of your workspace.
SSAE 18
attestation standard
I & II
report period types
Shared
evidence with SOC 2
- Control objectives library
- Type I / Type II periods
- System description, drafted
- Readiness scorecard + AI
What’s in the module
The report your customers’ auditors ask for
When your service affects a customer’s financial statements, they need a SOC 1. Build it on the same evidence store and audit trail as the rest of your workspace.
- 01
Control objectives library
Define control objectives and map the controls that satisfy them, so the report structure mirrors how you actually operate.
- 02
Type I / Type II periods
Manage report periods and their lifecycle, so the observation window and the evidence that belongs to it are explicit.
- 03
System description, drafted
A structured editor for the system description, with an AI drafter that proposes a first version from your controls and scope.
- 04
Readiness scorecard + AI
See where you stand objective by objective before the auditor arrives, with an AI readiness analyser that verdicts each area.
How it runs
From control objectives to an attestation-ready report
Control objectives library
Define control objectives and map the controls that satisfy each one, so the report mirrors how you actually operate — the structure an auditor works from.
Type I / Type II periods
Create and manage report periods with their lifecycle, so the observation window and the evidence that belongs to it are explicit and tracked.
System description + readiness
A structured system-description editor with an AI drafter, plus a readiness scorecard and AI analyser that verdicts each area before the auditor arrives.
Already running SOC 2? SOC 1 shares the same evidence and controls, so the operational work carries across instead of being gathered twice.
See SOC 1 readiness on your evidence
Bring your controls and we’ll show the objectives library, periods and readiness scorecard live.