Overview
A Bridge Letter bridges the gap between the end of the last SOC audit period and the current date, to state any changes to the SOC controls, and is commonly requested by prospective customers as part of the Security Review process.
A Bridge Letter usually contains:
Static Content
The beginning and end dates of the most recent SOC audit period
An explanation of any changes to the organization's systems or controls since the audit, if any
The signer's name, title, and script-like signature
Dynamic Content
Date the letter was validated/signed
The recipient of the letter (Company or User)
SafeBase allows organizations to configure self-service bridge letters for SOC 1 and SOC 2 reports, reducing the back and forth needed from internal Security teams.
Configure Automated SOC Bridge Letters
Navigate to a
SOC 2 ReportorSOC 1 Reportitem and click EditThese can be found on the Reports or Compliance card
Enable the toggle for the Bridge Letter at the bottom of the item:
3. From there, enter the Letter Template and Signer Name and Title.
Note that SafeBase will automatically add the appropriate Organization Logo and Company Name dynamically when the Bridge Letter is downloaded.
4. After customizing the fields, click the Save button in the top right to save the changes.
Visitors can now view or download a Bridge Letter directly from the SOC item.
Document Breakdown
SafeBase features a new “SOC Bridge Letter” section in the item with a PDF attachment.
Once downloaded, the PDF incorporates:
The logo of the Organization
The current date
The recipient
The letter template
The signer's name, title, and signature
The signature is the signer's name written in a signature-like font, generated by SafeBase
A watermark, including a customized footer.
This can be toggled off/on in your Trust Center Settings.
Sample Bridge Letter
