SOC 2 Readiness Calculator
20 questions. Get a readiness score, an estimated timeline to a Type II report, and a prioritized gap list — calibrated for 10–200 person SaaS companies on their first audit.
Answers are scored in your browser and never transmittedYour gaps, prioritized
Cut months off that timeline.
LukaGRC maps these gaps to SOC 2 controls, generates your policies, and collects evidence automatically — free 7-day trial, transparent per-user pricing.
Start free trial →Common questions
Is this SOC 2 calculator free?
Yes — free and ungated. No email, no signup. Answers are scored entirely in your browser and never transmitted.
How accurate is the timeline estimate?
It's calibrated from typical first-audit timelines for 10–200 person SaaS companies: gap remediation pace plus the mandatory Type II observation window (usually 3 months minimum). Your auditor's schedule and scope decisions can move it either way.
Do I need Type I before Type II?
No — you can go straight to Type II. Type I is a point-in-time design review that's useful when a customer needs proof of progress before your observation window completes.
Which Trust Services Criteria does this cover?
Security (mandatory for every SOC 2) plus organizational readiness. Availability and Confidentiality appear as scope questions since most SaaS reports include them.