SOC 2, also known as Service Organization Control Type 2, is a cybersecurity compliance framework established by the American Institute of Certified Public Accountants (AICPA). Its main purpose is to ensure the security of client data handled by third-party service providers. It specifies how organizations should manage customer data based on the Trust Services Criteria (TSC) of Security, Availability, Confidentiality, Processing Integrity, and Privacy.