When an American customer asks about SOC 2, they usually want to understand the service they will rely on and the controls protecting it. A logo or a general statement rarely answers that question.
Show how the controls operate
For each relevant control, identify an owner, a frequency, and the source of the evidence. Access reviews, change records, monitoring, and incident handling should connect to the service in scope.
Be precise about the report
Type I addresses control design at a specified date. Type II also covers operating effectiveness over a defined period. Explain which report you have, which services it covers, and any exceptions or limitations relevant to the customer. If you are still preparing, describe that status accurately and share evidence through an appropriate review process.