SOC 2 Type 2

Explanation

Request the SonicWall SOC 2 Type 2 report or a letter of attestation for a security review

  • Last validated: Oct 21, 2026
  • 3 minutes to read

SonicWall Cloud Secure Edge (CSE) is in the scope of the SonicWall SOC 2 Type 2 report. Use this page to request the report, or a letter of attestation, for your security or vendor review.

System and Organization Controls 2 (SOC 2) is an audit standard from the American Institute of Certified Public Accountants (AICPA). In a Type 2 audit, an independent auditor tests whether the SonicWall security controls meet the AICPA Trust Services Criteria. The auditor checks that the controls are designed correctly and that they worked throughout the audit period, not only on a single date.

Documents you can request

Document What it contains Requirement
Letter of attestation A signed SonicWall letter that confirms SonicWall holds a current SOC 2 Type 2 report None. No NDA is required.
Full SOC 2 Type 2 report The complete auditor’s report, including control descriptions and test results A non-disclosure agreement (NDA) or an existing agreement with SonicWall

If your organization cannot sign an NDA, for example during a public tender, request the letter of attestation.

Request the documents

  1. Contact your SonicWall account team. If you do not know your account team, contact SonicWall Sales, or email Sales@sonicwall.com, or call +1-888-557-6642.
  2. Tell your account team whether you need the letter of attestation, the full report, or both.
  3. For the full report, your account team arranges an NDA if your organization does not already have an agreement with SonicWall.

To prepare the letter of attestation, SonicWall needs this information:

  • Your organization’s full legal entity name, including any suffix, such as Inc. or Ltd.
  • Your company address, including the suite number, city, state or province, postal code, and country.
  • A contact name and email address.

Request the full report from the Trust Center

You can also request the full report from the SonicWall Trust Center. Select Get access, and then complete the access request. SonicWall releases restricted documents, including the full SOC 2 Type 2 report, after an NDA or another agreement is in place. Your account team can arrange the NDA.

What the controls cover in CSE

The SOC 2 controls govern how SonicWall staff reach the CSE production systems. For example, access to the accounts that host your organization’s Internal CA key vault and Kubernetes clusters follows these controls for production access and audit logging. See How CSE Manages Your Cluster.

Was this page helpful?