Where can I request the SOC 2 report?
Open SOC2 Report under Compliance and Certifications. Select Get Access to start the email access flow.
Open Compliance and Certifications ↗Zentrova trust center
Is your trust center agent ready?
The portal shows where buyers can request the SOC 2 report. ChatGPT and Claude both missed that step in our web search test.
Three questions a buyer can ask
Do you encrypt customer data at rest?
Zentrova says it uses AES-256 for stored data, backups, and cloud volumes.
Read the encryption FAQ ↗Which subprocessors handle our data?
The portal lists nine entries, including Google, OpenAI, and Anthropic. Confirm which apply to your service.
View the portal’s subprocessor list ↗What the SOC 2 request revealed
The public description names Security and Availability. The access dialog asks for an email. The audit period and report type were not established from the public listing. A separate Type II engagement letter does not establish the report type.
Two sources list different vendors
Trust center ↗
Nine rows under View all sub-processors. AWS did not appear in those rows.
Privacy policy ↗
The policy lists AWS among key subprocessors and describes US processing through AWS.
Suggested fix: Explain each list’s scope and link both pages to the current list for each service.
What made this harder for an agent?
The rendered portal provided the three answers above. Neither chat product reported being able to read that exact page. ChatGPT found encryption and vendor examples in the privacy policy; Claude couldn’t verify any of the three answers in this run.
How the check was run
One public web search run per product on Nov 12, 2026. Both received the same three buyer questions and exact portal URL. A separate browser review confirmed the visible sources and access flow. No access request was submitted.
To help agents cite the right answer, publish the three answers as visible page text, give them stable links, and label the SOC 2 dialog with the document name.