SOC Assurance over Marketplace solutions

[LisaS]

Is there any clear coverage for audit purposes over Marketplace solutions such as the Excel Add-In or Application Reports? I don't see it clearly covered in the SOC1 or SOC2 reports and our auditors are questioning how we know the interfaces and reports are complete and accurate, etc.

[J_Miller · Accepted solution]

@LisaS The SOC2 report does include the MarketPlace solutions, and this scope is highlighted on page 9, under the Scope of the Description section.  The first paragraph clarifies the scope of the controls.  Additionally, the MarketPlace solutions are further defined on page 12.  The Excel Add-in isn't a MarketPlace solution per se, it's an optional end user interface that is part of the platform.