← SOC 2 Trust Services Criteria in plain English

C1.1 C1

Confidentiality / C1.1

Identifying and protecting information promised to be confidential

Think of it likeKnowing which drawer holds the private letters before you can guard it.

In plain English

Information covered by confidentiality commitments is identified and maintained as such throughout its life, which means knowing where it is and who may see it.

Related CSF, CIS and ISO controls (unofficial mapping)