C - Confidentiality

The C-Confidentiality criterion in SOC 2 requires organizations to implement controls that safeguard information designated as confidential from unauthorized access or disclosure. This includes policies, encryption, access limits, and monitoring to ensure data remains protected throughout its lifecycle.