A report based on “Trust Services Criteria” (Security, Availability, Processing Integrity, Confidentiality, and Privacy). A Type II report is the most valuable because it proves the company followed these rules over a period of time (usually 6–12 months), not just on a single day.