SOC 2 (System and Organization Controls) is an information security standard designed to evaluate the controls and procedures of companies that store customer data in the cloud. The standard focuses on five principles: security, availability, processing integrity, confidentiality, and privacy, ensuring that the organization has appropriate procedures in place to protect its information and systems. Compliance with SOC 2 demonstrates the company's commitment to information security and the protection of its customers' privacy.