Context

During the SOC 2 certification process, organizations need to provide their official address. Some companies may have both a registered business address and a physical office location, leading to questions about which address should be used for certification purposes.

Answer

For SOC 2 certification, you should use your company's official registered address (incorporation address), not your physical office location. This is the address that appears on your official business registration documents.

For example:

• If your company is officially registered at one address but operates from rented office space at a different location, use the registered address

• The registered address can be verified through official business registries or corporate documentation

You can track your SOC 2 certification progress, including observation period dates, in the Compliance section of your account at: https://app.bastion.tech/compliance/audits