AI Summary of SOC 2

Table of Contents

• Getting Started
• How to Request
• FAQ

Getting Started

It is one of your critical vendors. They’ll have access to your most sensitive data. You need an in-depth analysis of their security practices to ensure that your data will be safe with them. So you request their SOC 2 Audit Report… 

Four hours into reviewing a 95-page document, you think, there has to be a better way!

Introducing Whistic’s AI-powered SOC 2 Summarization tool. It reviews and analyzes SOC 2 reports, providing a detailed executive summary that includes everything you need to know about that vendor’s security controls as outlined in the SOC 2.  

If you haven't yet reviewed Whistic's AI & Security policies for how information is accessed, stored, used, etc - please go here for more information. 

How to Request a Summary

1. Open the Vendor Detail page
2. Go to the vendor’s Document Repository dropdown
3. Upload the vendor’s SOC 2 Audit Report
4. Select the Summarize SOC 2 button
   
   
5. A window will appear displaying documents available for summarization. 
   1. To be eligible for summarization, the document must be a PDF file type uploaded to the vendor’s Document Repository. 
   2. Additionally, each account is allotted a certain number of Summaries. Upon requesting a new one, you'll see how many requests remain. If there are no longer any Summary credits available, please contact your CSM. 
      
      
6. Select the document to be summarized
   1. Currently only SOC and SOC 2 reports are supported. If you select a different type of report, it will fail.
7. Select Create Summary
8. Within a few minutes, a new document will appear in the vendor’s Document Repository. The new document will:
   1. Appear automatically once complete, no need to refresh
   2. Use the same Name as the original document with ‘Summary’ appended - ie) original_document - Summary.pdf
   3. Have a Source = AI Generated
9. Once the summary is available, you'll receive a message in the Notification Center, see the 'bell' icon in the upper right. If the file does not appear within 30 minutes, please contact [e-mail]. 
10. Finally - Not only will you get the summarized document, but much of of the key information extracted will be available in a new reporting index call SOC 2 Summaries.
    

FAQ

• Does this support file types other than PDF?
  • No
• Does this support other types of reports than SOC2s?
  • We currently support summarizing SOC1 and SOC2 reports. If you attempt to summarize a different type of report, the process will fail. (Please let us know what other report types you are interested in summarizing – different document types will be supported soon.)
• Can I select more than one document at once?
  • No
• Will this work for SOC 2 reports gathered from a questionnaire?
  • Yes
• Will this work for SOC 2 reports gathered from an issue?
  • No, we are still working on this. 
• Can I view the summary without needing to download?
  • Yes