Which type of report is considered for "general" use and does not contain any sensitive information?

SOC 1 reports focus on internal controls over financial reporting and are restricted to users who need to understand those controls.

SAS 70 was an auditing standard that has been replaced by the SOC reporting framework.

SOC 3 reports are designed for general use, offering a public summary of an organization's internal controls over security, availability, processing integrity, confidentiality, and privacy. Unlike SOC 1 or SOC 2 reports, they do not contain sensitive or proprietary information, making them suitable for broader distribution to potential customers or the public.

SOC 2 reports provide a detailed assurance report on controls related to security, availability, processing integrity, confidentiality, and privacy, but they contain sensitive information and are restricted to specific stakeholders.