What is a SOC report? SOC stands for service organization controls. Oracle NetSuite's SOC II is a type II report which means it covers both design and operating effectiveness, are prepared and audited by independent third-party auditors and covers controls on security, availability, and confidentiality.