What is the difference between SOC 2 and ISO 27001?

SOC 2 is a US-originated AICPA audit standard that produces a confidential report shared under NDA, showing how a vendor's controls performed over 12 months. ISO 27001 is an international ISO standard that produces a public certificate confirming an audited information security management system. Enterprises often require both: SOC 2 for operational assurance and ISO 27001 for regulatory or procurement checklists.