Where can I find SOC 2 Reports for 2022 and 2023?

[Dave Williams]

I can get the most recent report in the Trust Center, but not sure where to find them for prior years.  We are doing an audit on prior years.  Thanks! 

[pknowlton · Accepted solution]

Hi Dave!

The best way to receive historical SOC 2 Type II Reports and Bridge Letters from previous years is to login to Atlassian support with your company's active Atlassian account or contact your Executive Sales Representative if your company has one assigned to your account.

Atlassian Support: https://support.atlassian.com/

I hope this helps!

[Dave Williams]

Thanks for responding.  There is no clear way to submit this kind of request via the support site and we do not have an Exec Sales Rep.  The closest thing I could find was submitting a ticket for a bug!  Will see what I can get with that.  Thanks.  

[Susan Waldrip]

Hi @Dave Williams and others, just following up to make sure you saw this post from this today, Updated SOC 2 Reports for Atlassian Products, in case it's helpful for your work.

[Dave Williams]

Yes thanks.  I was able to obtain prior year reports through opening a ticket.  

[policenbiclearance]

To access SOC 2 reports for prior years, including 2022 and earlier, you’ll typically need to contact the organization’s compliance or support team directly. Many companies only make the most recent report available in their Trust Center due to relevance and data sensitivity. You can read here. However, they often maintain archives of older reports for audit or regulatory purposes.

Here are some steps you can follow:

1. Reach out to Support or Compliance: Use the contact information provided in the Trust Center to request prior-year reports. Be prepared to explain your audit requirements and any necessary permissions.
2. Check the Trust Center Thoroughly: Some organizations have a secure, hidden section for archived reports. If you're an authorized user, you might find an option to request access or view older documents.
3. Verify NDA Requirements: Older SOC 2 reports may require a non-disclosure agreement before they can be shared.

[Susan Waldrip]

Hi @Dave Williams , Welcome to the Community!

@Vish Reddy {Revyz} , do you know where Dave can find these older SOC2 reports? (and Thank You!)

[Susan Waldrip]

Also @Dave Williams , I did a little research online and apparently these are vendor-specific reports so they don't (usually?) publish them to the public. If you have a good relationship with a vendor(s), you might ask them if you can see them or at least parts of them for your needs.

[Dave Williams]

Thanks Susan, I'm not sure how to reach out to Atlassian to request these.  We definitely spend a lot of money on a variety of their products, but I'm not sure how to submit this request.  

[Susan Waldrip]

Hi @Dave Williams , you can open a ticket with Atlassian Support directly via https://support.atlassian.com/contact/#/ .