SOC 2, which stands for Service Organization Control 2, is a framework developed by the American Institute of Certified Public Accountants (AICPA) to assess and report on the controls at service organizations that are relevant to security, availability, processing integrity, confidentiality, and privacy. It is specifically designed for service providers that store customer data in the cloud or handle sensitive information on behalf of their clients.