SOC 2
Support technical control evidence without representing an independent CPA attestation.
Technical evidenceOne security finding.
Multiple evidence views.
AuthMargin maps observed Microsoft 365 technical controls into several readiness views without pretending that a scanner is an auditor, certification body or legal opinion.
CIS Microsoft 365
Map validated tenant checks to maintained product mappings without republishing protected benchmark text.
Technical evidenceNIST CSF 2.0
Connect Microsoft 365 evidence to relevant cybersecurity outcomes and risk-management context.
Technical evidenceISO/IEC 27001:2022
Support technical evidence within a broader ISMS while keeping certification decisions with accredited certification bodies.
Technical evidenceHIPAA Security Rule
Surface selected Microsoft 365 technical safeguard evidence within a regulated entity's broader compliance program.
Technical evidenceMicrosoft service assurance
Separate Microsoft's controls from your tenant controls.
AuthMargin keeps Microsoft cloud-service assurance references separate from controls the customer configures and operates in its own tenant.
Authorized customers can use Microsoft's assurance channels for applicable service reports and supporting material. AuthMargin does not need to copy restricted reports into customer evidence.
AuthMargin collects evidence for customer-controlled identities, access policies, applications, devices, mail rules and remediation activity so responsibility remains clear.
AuthMargin does not provide SOC 2 attestations, ISO/IEC 27001 certification, HIPAA legal determinations or CIS certification. Framework views support technical readiness, evidence collection and remediation planning.
Start with defensible tenant evidence.
Run an assessment, review the technical controls, then use the report center to print or save the current evidence view.