> For the complete documentation index, see [llms.txt](https://answeringservicecare.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://answeringservicecare.com/docs/useful-resources/useful-resources/soc-2-type-ii.md). # SOC 2 Type II Overview of ASC controls and practices relevant to ASC's SOC 2 Type II posture, including how an enterprise reviewer can request the report. Answering Service Care (ASC) is a US-based, 24/7 answering service. This page summarizes the kinds of controls and operating practices customers often review in relation to ASC's SOC 2 Type II posture, and explains how an enterprise reviewer can request supporting documentation. Use it as a high-level overview during security review and implementation planning. {% hint style="info" %} This page is a summary, not a substitute for formal audit documentation or contractual review. It describes control themes at a high level and does not assert specific audit results. Refer to the official report and ASC's formal review process for authoritative information. {% endhint %} ### What this page covers This overview focuses on broad control areas such as: * access management * change and deployment controls * logging and monitoring * backup and continuity practices * operational security processes It also explains [how to request the SOC 2 Type II report](#how-to-request-the-report) for your own review. ### Trust Services Criteria themes SOC 2 reports are organized around the AICPA Trust Services Criteria. At a high level, the themes most relevant to an answering service review are: * **Security:** protecting systems and data against unauthorized access, including access control, authentication, and monitoring. * **Availability:** keeping the service operational and accessible, supported by continuity, backup, and recovery practices. * **Confidentiality:** protecting information designated as confidential throughout its lifecycle. {% hint style="info" %} These are the criteria themes a SOC 2 Type II report can address. This page does not state which criteria are in scope for ASC's report or what the audit concluded. Those details belong to the report itself. {% endhint %} ### Control themes relevant to ASC #### Access and authorization ASC uses role-based access patterns so teams can separate admin, supervisor, agent, and client responsibilities. Access should be granted only to users who need it. #### Operational control Production access, configuration changes, and administrative workflows should follow controlled internal processes. This helps reduce risk and support traceability. #### Logging and monitoring System and workflow activity records help support oversight, troubleshooting, and operational review. #### Continuity and resilience Backup, recovery, and service continuity practices support ongoing platform availability and recovery planning. ### How to request the report A current SOC 2 Type II report is available to customers and prospects **on request, under a non-disclosure agreement (NDA)**. Contact ASC sales or security through your account manager or to receive a copy. The report itself states the audit period covered and the independent auditor who performed the examination. Enterprise reviewers can also start at the Trust Center: . {% hint style="warning" %} Do not represent the report's availability, scope, audit period, or auditor to a customer until these details have been verified by the appropriate ASC team. {% endhint %} ### How to use this in a review Use this page to understand the control areas ASC supports. For detailed trust, audit, or legal review questions, use your formal security review process and contact the appropriate ASC team. ### Related pages * Security Overview * HIPAA * Security & Compliance --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://answeringservicecare.com/docs/useful-resources/useful-resources/soc-2-type-ii.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.