supernav-iconGet & Stay Compliant: A Beginner's Guide to SOC2
Contact Sales
Drata Wordmark Black
  • Solutions
    • Platform
      • Startup
      • Scale
      • Audit Hub
      • Trust Center
      • Risk Management
      • Open API
      • Integrations
    • Frameworks
      • Cyber Essentials
      • SOC 2
      • ISO 27001
      • HIPAA
      • GDPR
      • Custom Frameworks
      • All Frameworks
    • SOC 2 Compliance: A Beginner's Guide
      Access the Guide
      SOC 2 Guide
  • Resources
    • Resources
      • Blog
      • Events
      • Webinars
      • Reports
      • Compliance Glossary
      • Community
      • API Documentation
    • Featured
      • Cloud Service Provider's Guide to FedRAMP
      • Navigating Fintech Risk and Compliance
      • A Start-to-Finish Guide on SOC 2 Compliance
      • A Complete Guide to Cybersecurity Risk Management
    • Navigating the Fintech Risk and Compliance Ecosystem
      Download
      Navigating the Fintech Risk and Compliance Ecosystem
  • Auditors
  • Customers
  • Company
    • Company
      • Careers
      • Auditors
      • Partners
      • Press
      • Security
      • Contact Us
    • Drata Named One of the Best Workplaces in Technology
      Read More
      Drata Linkedin Global Nav
  • Sign In
  • Get Started
  • Sign In
  • Get Started
HomeCompliance GlossaryWhat is SSAE 18?

What is SSAE 18?

SSAE 18 is a series of enhancements aimed to increase the usefulness and quality of SOC reports, now superseding SSAE 16. The changes made to the standard this time around will require companies to take more control and ownership of their own internal controls around the identification and classification of risk and appropriate management of third party vendor relationships. These changes, while not overly burdensome, will help close the loop on key areas that industry professionals noted gaps in many service organization’s reports.


Clients use the SSAE 18 standard to pursue a SOC 1 report.

Join the thousands of companies that trust Drata

See All Case Studies
Abnormal Logo
Airbase
BambooHR Logo
Clearco Logo
Clearbit Logo
Superhuman
Lemonade Logo
Fivetran Logo
Notion Logo
Vercel Logo
Wordpress VIP
Calendly Logo

View Drata Glossary

Learn more about other compliance and cybersecurity concepts in our glossary.

Read More
Drata Wordmark White

Drata is a security and compliance automation platform that continuously monitors and collects evidence of a company’s security controls, while streamlining workflows to ensure audit-readiness.

Solutions

StartupScaleEnhanceDrata PlatformIntegrations
Frameworks
Cyber EssentialsSOC 2ISO 27001HIPAAGDPRCustom FrameworksAll Frameworks
Resources
BlogEventsWebinarsReportsCompliance GlossaryCommunityAPI Documentation
Company
Careers
HIRING
CustomersAuditorsPartnersPressContact Us
Trust
Security and ComplianceTrust CenterSystem Status
Become a Trusted Newsletter Insider

The latest security and compliance news, delivered.


© 2023 Drata Inc. All rights reserved.

Privacy PolicyGDPRTermsCookiesDisclosure PolicySub-processorsData Processing Addendum