A SOC 2 report functions as a written form of assurance that the vendor is protecting their data. This is particularly useful to companies that are assessing potential cloud providers, since reading the report gives them transparency for what to expect of the provider.