# Notes on SOC 2, ISO 27001 and audit evidence · Meiyam

> Guides from the Meiyam team on SOC 2, ISO 27001, audit readiness and the evidence auditors ask for.

Canonical: https://meiyam.com/notes

From the Meiyam team

## Notes on SOC 2, ISO 27001 and audit evidence

Notes from the Meiyam team on SOC 2, ISO 27001 and evidence engineering.

[Engineering 29 Aug 2026 2 min How a compliance scan works From a read-only connection to a sealed finding: what happens when Meiyam scans your environment, and what a scan never does. Meiyam Engineering](https://meiyam.com/notes/how-scanning-works) [Trust 29 Aug 2026 2 min Read-only, and you can check it Every permission Meiyam holds, integration by integration, and how to inspect each one before you grant it. Meiyam Engineering](https://meiyam.com/notes/the-trust-posture) [Product 29 Aug 2026 2 min What is Meiyam? Meiyam is compliance automation for SOC 2 and ISO 27001: what it checks today, how it keeps evidence, what is planned and what it leaves to your auditor. Meiyam Engineering](https://meiyam.com/notes/what-meiyam-is)