What is the difference between SOC 2 Type I and Type II?

SOC 2 Type I assesses the suitability of control design as of a specified date. SOC 2 Type II also assesses whether the controls operated effectively over a stated period. Both reports apply to a defined system and criteria, so the scope and review period matter as much as the report type.