Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is SSAE 16?

The Statement on Standards for Attestation Engagements No. 16 (SSAE 16) is a set of auditing standards and guidance published by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA).


Auditors use SSAE 16 as a guide when creating two specific audit reports: The first is a snapshot to reflect the status of an organization's controls on a particular day, and the second is to incorporate historical data that reflects how controls have changed over time. Auditing standards, like SSAE 16, are used by auditors to guide the discovery of controls, including security controls, in all types of organizations, such as data centers, internet service providers (ISPs) and other entities that incorporate information security controls. The use of such standards is important in order to help both organizations and auditors in demonstrating information security compliance with regulations, such as Sarbanes-Oxley.


Clients use the SSAE 16 standard to pursue a SOC 1 report.

Additional resources you might like:

ISO 27001
Blog
The Australian startups guide to ISO 27001

Understand the benefits, steps to certification, and how Vanta simplifies the journey.

SOC 2
Blog
What is SOC 2 and why Australian startups need it

SOC 2 for Aussie startups.

Compliance
Events
3 Steps to Kick Off First-Time Compliance in 2026

Join us for a session on how to make compliance work at your pace, without slowing momentum, stalling deals, or putting revenue at risk.

Additional resources you might like:

ISO 27001
Blog
The Australian startups guide to ISO 27001

Understand the benefits, steps to certification, and how Vanta simplifies the journey.

SOC 2
Blog
What is SOC 2 and why Australian startups need it

SOC 2 for Aussie startups.

Compliance
Events
3 Steps to Kick Off First-Time Compliance in 2026

Join us for a session on how to make compliance work at your pace, without slowing momentum, stalling deals, or putting revenue at risk.

Vendor Risk Management
Events
Office Hour: Transform how you manage third-party and internal risk

Join us for a live, interactive Office Hour as we dive deeper into Vanta’s vision for unified, continuous, AI-powered risk management, and what it means for your business today.

Compliance
Events
Live Demo: Accelerate Security and Compliance Workflows with AI

Join us for a live demo to see how Vanta AI streamlines your security and compliance workflows.

SOC 2
Events
Live Demo: Automating SOC 2, ISO 27001 & More with Vanta

Join our demo to see how leading startups and security teams are automating compliance across 35+ frameworks, including SOC 2, ISO 27001, and HIPAA.

Compliance
Events
Navigating Fintech Compliance in an Evolving Regulatory Landscape

Watch on-demand to hear from Vanta and Codat on how to future-proof your fintech’s compliance strategy and transform it into a competitive advantage. 

Comparisons and reviews
Blog
Why enterprise leaders choose Vanta over Drata to prove and manage trust

Learn how Vanta is uniquely equipped to meet the needs of large, complex organizations.

GRC
Events
The New Growth Playbook: How GRC Unlocks Trust and Speed at Scale

Watch this on-demand webinar to hear Vanta and Sensiba discuss how to evolve your approach to risk and compliance — turning it from a blocker into a business accelerator.