Back to docs
Recipe

SOC 2 Compliance Doc

Generate a complete SOC 2 compliance document tailored to your infrastructure and security controls.

Overview

This recipe walks you through producing a SOC 2 Type II readiness document. Meridian pulls your cloud provider metadata, access policies, encryption standards, and incident response procedures into a single auditable artifact.

Prerequisites

  • Meridian agent deployed on target hosts
  • Read access to cloud IAM policies
  • Logging pipeline configured

Quick Start

meridian recipe run soc2-compliance --output report.pdf

The CLI collects evidence across trust service criteria and renders a PDF ready for auditor review.

What's Included

Access control matrix
Encryption at rest/transit
Change management log
Incident response plan
Vulnerability scan summary
Backup & DR evidence

Next Steps

After generation, review each TSC section with your auditor. Meridian keeps a versioned history so you can track changes between audit cycles.