Are you being asked for SOC reports or getting more IT security questionnaires and governance inquiries for services? Service auditor reports give assurance on your controls design and effectiveness.

Building customer confidence and trust in delivering the relevant services can be hard to achieve.

Service auditor reports (SAR) provide independent assurance against recognised standards on outsourced service providers' effective controls. They enhance customer relationships and deliver efficiencies by avoiding the need for multiple audits.

Understanding the different reports and choosing the right SAR product is vital, so we’re here to help you. From IT service providers to property management companies, you'll benefit from a SAR product, more commonly known as a SOC report.

  • Independent controls assurance
  • Tailored SAR product options
  • Global methodology
  • Independent controls assurance
    Independent controls assurance
    Robust opinion on the effectiveness of your controls environment over a point in time (Type1) or a period (Type 2).
  • Tailored SAR product options
    Icon depicting a purple document sign
    Independent reports based on ISAE (3402/3000), AICPA (SOC1/2/3) or AAF standards.
  • Global methodology
    Purple icon depicting a globe
    Seamlessly integrated services for businesses with international operations.

Why Grant Thornton

We’ll take away the audit fatigue that outsourced service providers often suffer, taking a fresh approach to existing reporting requirements. 

You’ll work with an expert team who remain current on best practices and technical requirements in service organisation controls reporting.  Through collaboration you’ll find the right report for your business. This expertise enables us to provide independent assurance across financial, technology and operational processes in a single report.

If you have an international presence our global capacity will enable you to benefit from a consistent and cohesive approach.

Helping a software company deliver quality audit reporting

The challenge
An enterprise software company needed a SOC 1 / ISAE 3402 service auditor report.
The solution
We collaborated with the company’s UK and offshore teams throughout the 9-month project: delivering an agile approach to suit their needs.
The result
The company produced high-quality SOC 1 ISAE 3402 audits and Type 1 reports which provided assurance over both their systems in scope allowing them to build towards a Type 2 report.