Checklist

SOC 2 Evidence Collection Master Plan: The Complete Checklist for SaaS Founders

Pre-collect your audit evidence before the auditor asks — and skip the midnight scramble.

When your SOC 2 audit kicks off, your auditor sends an evidence request list — screenshots, logs, exports, configuration records, documentation. For most founders doing their first audit, it arrives and immediately creates a two-week scramble. It does not have to be that way. With this checklist, you can pre-collect the bulk of your evidence four to six weeks before the audit starts, organized into the 11 categories auditors expect.