What does "SOC2 Certified" mean? You don't get a certificate. The external auditor will issue the report and opine if you have effective controls in place for either a point in time (type 1) or for a duration of time (type 2). They don't certify you for anything.