Embed the SOC 2 readiness check on your site
Put the free SOC 2 readiness check on your own website. Visitors answer 20 questions, see their score and gap list, and the results end with a button to contact you. Enter your details, check the preview and copy the snippet. Everything on this page happens in your browser.
How it works
- The snippet is an iframe of
/embed/soc-2-readiness with your settings in its address. Paste it into any page that accepts HTML, such as a WordPress custom HTML block or a Webflow embed element. - Height. Without the script, the frame is 900px tall and the check scrolls inside it. The optional script resizes the frame to fit its content: the embedded page sends only its height, as a number, and the script accepts it only from the Policyseed origin and only for its own frames.
- Your call to action. The results end with “Discuss these results with” your name, linked to your contact page, or to an email with the subject and a short score summary filled in. It opens in a new tab; the visitor decides whether to send anything.
- Sandboxed. The snippet's sandbox lets the check run, open links in a new tab and download the gap report. It cannot navigate or read your page.
Prefer to work through the check with a client yourself? Use the public readiness check, and see what else the Agency license covers.
Frequently asked questions
- Do I get the visitor's answers or contact details?
- No. There is no backend and no form. The check runs in the visitor's browser, and nothing is sent to you or to Policyseed. If the visitor clicks your call to action, they go to your contact page, or their email app opens with a short summary of their score that they can read and edit before sending.
- What does it cost?
- Nothing. The embed is free and needs no license key or account. Each embed carries a small "Powered by Policyseed" link under the check.
- Which contact links are accepted?
- An https:// address, such as a booking page or contact form, or an email address. Anything else, including plain http:// links, is ignored and the results end with a link to the Policyseed generator instead.
- Can my site's visitors see the gap list?
- Yes. They get the same score, area breakdown and prioritized gap list as on the public check, can download the gap report, and can open the free policy templates in a new tab. The share buttons of the public page are left out of the embed.
- Will the embed hurt my search ranking or Policyseed's?
- No. The embedded page is marked noindex and its canonical address is the public readiness check, so search engines do not treat it as duplicate content on either site.
Policyseed provides governance policy templates and AI tailoring. It is not legal advice and not a compliance guarantee. Management adopts the policies; the CPA firm performs the SOC 2 examination.