Need a copy of Adobe's SOC 2 Type 2 Attestation Report

[davidn49924503]

I've wasted 3 hours this morning trying to navigate Adobe's customer service maze to no effect.

I'm an Adobe Acrobat DC subscriber, primarily for Adobe Sign. We're going through a SOC 2 Type 2 audit and I need to provide a copy of Adobe's SOC 2 Type 2 Attestation report. Adobe's customer care group in India doesn't have a clue. One of them emailed me their W-9... Another sent me to their compliance page, which shows what certs they have, but no links to the actual reports. Can you help? Most of our other vendors (e.g Salesforce) provide them online within a click or two.

[Peru Bob · Accepted solution]

This is the Using the Community forum (which is the forum for issues using the forums).

You may need to contact  Corporate headquarters:

Adobe
345 Park Avenue
San Jose, CA 95110-2704

Tel: 408-536-6000
Fax: 408-537-6000

[davidn49924503]

Yes, well corporate referred me to the community forums. They are useless. I've now resorted to contacting 3 compliance execs at Adobe on LinkedIn. This is ridiculous.

[Nancy OShea]

Are you an Enterprise customer?  Perhaps this is what you're looking for? 

https://www.adobe.com/trust/compliance/compliance-list.html

[davidn49924503]

No, we're not an Enterprise customer but their compliance URL shows they have SOC 2 for mostly all products/services. I did get a call from them yesterday and was told that they only provide SOC 2 reports to Enterprise Customers. I was really annoyed by that. So they claim SOC 2 compliance, but they'll only "prove it" if you sign up for a higher tier of service?? That's pretty much what he said. Well anyone can claim compliance, but if you will not produce the report, even under an NDA, that's a huge red mark against doing business with you. In fact in order to achieve our own SOC 2 compliance, we're required to discontinue service with them since we cannot be assured of their compliance. What a way to do business... For Salesforce, I logged in to my portal, clicked a click-wrap, and downloaded their report. Kudos Salesforce, shame on Adobe.

[Nancy OShea]

Sorry but this is a user-to-user product forum, NOT a direct pipeline to Adobe's decision-makers.  Nobody here has any influence over what Adobe does.  Suggest you voice your concerns in a letter to corporate HQ where it might have some impact.

Goodbye & good luck! 🙂

[Risa0101]

I'd like to get a copy of the SOC2 report as well. However, unlike you, I do work under an Enterprise License, and I am interested in understanding why my agency doesn't allow me to use a significant portion of the Cloud features within Adobe Creative Cloud (fonts, collaborations, cloud backups, digital signatures, etc.)  After seeking these SOC2 reports from a few other companies in the past, I realized an NDA is standard and it often takes multiple layers of negotiation at the correct (highest) level (from our end) before they are willing to share.  Adobe has the potential to increase its business with Enterprise Federal government customers if they spent time doing the hard work to address the mandatory security and supply chain issues.