# Trust categories, in this shelf's words

SOC 2 reports are written against the AICPA trust services criteria. The criteria categories are security, availability, processing integrity, confidentiality, and privacy. Security is the category every SOC 2 report includes. The others are optional. This note names the categories so an evidence index can point at one of them. It does not restate the criteria, and it is not an AICPA publication. The source for the category names is the [AICPA SOC 2 overview](https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2).