Scope

What are SOC1 and SOC2 Type II reports?

How to download SOC reports from the live site?

How to generate SOC reports from the live site?

Summary

SOC- Service Organization Control reports provide information on the fairness of the Chargebee's system and suitability of the design as well as an assessment of Chargebee's control environment.  SOC1 and SOC2 reports can be generated from the live site alone and merchants do not have an option to download the same from the test site.

Solution

SOC1 Type 2 - Service Organization Control (SOC) 1 Type II is a report on the fairness of the description of Chargebee's system and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives included in the description throughout a specified period. The report further provides information about Chargebee's control environment, which might be relevant to your internal controls over financial reporting.

SOC2 Type 2 - SOC 2 Type II report provides an independent assessment of Chargebee's control environment relevant to system security, availability, and confidentiality for customers and users in accordance with their business needs.

To download your SOC reports from your Chargebee live site, go to your Chargebee dashboard,

navigate to Settings > Security > Compliance at Chargebee-View

Certificates and attestations

You will be prompted with below page 

Select the year and download the report.

Note: At present we do not have an option to download the SOC report from test sites.

Note: 
- SOC1 Type 2 and SOC2 Type 2 reports have to be downloaded only from the Chargebee Live site.  Also, you need to agree to the Terms and Conditions prompt prior to download
- To have SOC1 Type 2 and SOC2 Type 2 reports available for download on your Chargebee Test site, contact support.