{"id":617,"date":"2026-05-28T02:58:04","date_gmt":"2026-05-28T02:58:04","guid":{"rendered":"https:\/\/3rdcomply.com\/blog\/?p=617"},"modified":"2026-05-29T02:09:20","modified_gmt":"2026-05-29T02:09:20","slug":"https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line","status":"publish","type":"post","link":"https:\/\/3rdcomply.com\/blog\/2026\/05\/28\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\/","title":{"rendered":"A Clean SOC 2 Report Not the Finish Line. It’s the Starting Gun."},"content":{"rendered":"\n

You just received a SOC 2 report from a vendor. No findings. Clean opinion.
Before you mark that assessment as complete stop. A clean SOC 2 report doesn’t mean your risk assessment is done. It means you finally have enough information to start doing it properly.<\/p>\n\n\n\n

The Dirty Secret About SOC 2 Scope<\/h2>\n\n\n\n

Here’s what a lot of TPRM professionals already know but don’t always say out loud: SOC 2 is not
a standardized audit framework. Not the way ISO 27001 is. The audit client defines their own controls. They choose the scope. They decide what gets written in, and what gets left out. And there’s no requirement that any of it aligns with your internal standards.
<\/p>\n\n\n\n

In practice, this means the controls in a SOC 2 report are often written at a very high level vague enough to pass the audit, but not detailed enough to actually answer your questions. Your own security policy probably has more specificity than the controls being tested.
So when you read that clean report, the real work is just beginning.<\/p>\n\n\n\n

Three Questions Every TPRM Professional Should Ask<\/h2>\n\n\n\n

Before drawing any conclusions from a SOC 2 report, you need to work through at least these
three:<\/p>\n\n\n\n

    \n
  1. Does the scope actually cover what you’re buying?<\/em>
    SOC 2 reports are scoped to specific systems and services. If your vendor offers ten products and
    you’re buying one of them, you need to confirm that this product the one your company relies
    on is included in the audit scope. Often, it’s not.<\/li>\n\n\n\n
  2. Do the controls match your internal requirements?<\/em>
    A control that satisfies the auditor may not satisfy your policies. Read them side by side. Don’t
    assume alignment just because the report looks thorough.<\/li>\n\n\n\n
  3. Are your most important controls even in there?
    <\/em>Sometimes the controls that matter most to your organization simply aren’t covered. Not
    because the vendor is hiding anything but because they weren’t required to include them. If
    encryption at rest is critical to you and the report is silent on it, that’s a gap you need to flag.<\/li>\n<\/ol>\n\n\n\n

    The Real Problem: Time<\/h2>\n\n\n\n

    All of this analysis takes time. Meaningful time. And meanwhile, your business colleagues are
    asking when the assessment will be done. The deal is waiting. The procurement team is
    following up. The pressure is real.
    That’s the tension at the heart of third-party risk management right now: the thoroughness the
    job demands versus the speed the business expects.<\/p>\n\n\n\n

    This Is Exactly Where 3rdComply Comes In<\/h2>\n\n\n\n

    We read the SOC 2 so you don’t have to do it manually every time. We analyze the full content of the report against SOC 2 best practices, against your internal requirements, and against what we already know about your vendor from prior assessments. And when something new comes in a new report, a policy update, a change in scope we do it again automatically.
    <\/p>\n\n\n\n

    What that means for you:<\/strong> instead of spending hours parsing control language, you can spend
    your time where it actually matters. Having the right conversations with your vendors. Pushing
    back when controls don’t meet your standards. Escalating when something looks off. That’s the
    work that requires human judgment. Let us handle the rest.<\/p>\n\n\n\n

    It’s 2026. Stop Reading SOC 2 Reports Manually<\/h2>\n\n\n\n

    The SOC 2 report is a means to an end. It’s one input into a risk assessment process not the
    assessment itself, and definitely not the conclusion. Used well, it’s the beginning of a conversation with your vendor. Used poorly (or not analyzed at all), it’s a checkbox that gives you a false sense of assurance.
    You deserve better than that. So do the companies you’re protecting.<\/p>\n\n\n\n

    Want to see how 3rdComply can help you run vendor risk assessments that are more efficient,
    more thorough, and continuous all year long? Let's chat.<\/strong> www.3rdcomply.com<\/em><\/pre>\n\n\n\n
    <\/p>\n","protected":false},"excerpt":{"rendered":"
    You just received a SOC 2 report from a vendor. No findings. Clean opinion.Before you mark that assessment as complete stop. A clean SOC 2 report doesn’t mean your risk assessment is done. It means you finally have enough information to start doing it properly. The Dirty Secret About SOC 2 Scope Here’s what a … Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":621,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-617","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance"],"yoast_head":"\nA Clean SOC 2 Report Is Not the Finish Line<\/title>\n<meta name=\"description\" content=\"A clean SOC 2 report isn't the finish line it's the starting gun. Here's what TPRM professionals should check before closing any vendor assessment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1, noarchive\" \/>\n<link rel=\"canonical\" href=\"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Clean SOC 2 Report Is Not the Finish Line\" \/>\n<meta property=\"og:description\" content=\"A clean SOC 2 report isn't the finish line it's the starting gun. Here's what TPRM professionals should check before closing any vendor assessment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line\" \/>\n<meta property=\"og:site_name\" content=\"Blog 3rdcomply\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-28T02:58:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-29T02:09:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/3rdComply-blogs-3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"3rdComply Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"3rdComply Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/2026\\\/05\\\/28\\\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\\\/\"},\"author\":{\"name\":\"3rdComply Admin\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb35af9c18abb4a214b43923eb82e2df\"},\"headline\":\"A Clean SOC 2 Report Not the Finish Line. It’s the Starting Gun.\",\"datePublished\":\"2026-05-28T02:58:04+00:00\",\"dateModified\":\"2026-05-29T02:09:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/2026\\\/05\\\/28\\\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\\\/\"},\"wordCount\":611,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/3rdComply-blogs-3.png\",\"articleSection\":[\"Compliance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/2026\\\/05\\\/28\\\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\\\/\",\"url\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line\",\"name\":\"A Clean SOC 2 Report Is Not the Finish Line\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/3rdComply-blogs-3.png\",\"datePublished\":\"2026-05-28T02:58:04+00:00\",\"dateModified\":\"2026-05-29T02:09:20+00:00\",\"description\":\"A clean SOC 2 report isn't the finish line it's the starting gun. Here's what TPRM professionals should check before closing any vendor assessment.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#primaryimage\",\"url\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/3rdComply-blogs-3.png\",\"contentUrl\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/3rdComply-blogs-3.png\",\"width\":1280,\"height\":720,\"caption\":\"A clean SOC 2 report is just the starting point not the conclusion of your vendor risk assessment.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/clean-soc2-report-not-the-finish-line#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Home > Blog > A Clean SOC 2 Report Is Not the Finish Line\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/\",\"name\":\"Blog 3rdcomply\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#organization\",\"name\":\"Blog 3rdcomply\",\"url\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/cropped-3rdcomply-logo.png\",\"contentUrl\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/cropped-3rdcomply-logo.png\",\"width\":1476,\"height\":511,\"caption\":\"Blog 3rdcomply\"},\"image\":{\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb35af9c18abb4a214b43923eb82e2df\",\"name\":\"3rdComply Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89bbd999f531f3c9baae50351f2903ff5eb6b023441032e887f868105af2b47d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89bbd999f531f3c9baae50351f2903ff5eb6b023441032e887f868105af2b47d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89bbd999f531f3c9baae50351f2903ff5eb6b023441032e887f868105af2b47d?s=96&d=mm&r=g\",\"caption\":\"3rdComply Admin\"},\"url\":\"https:\\\/\\\/3rdcomply.com\\\/blog\\\/author\\\/alya\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A Clean SOC 2 Report Is Not the Finish Line","description":"A clean SOC 2 report isn't the finish line it's the starting gun. Here's what TPRM professionals should check before closing any vendor assessment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1","archive":"noarchive"},"canonical":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line","og_locale":"en_US","og_type":"article","og_title":"A Clean SOC 2 Report Is Not the Finish Line","og_description":"A clean SOC 2 report isn't the finish line it's the starting gun. Here's what TPRM professionals should check before closing any vendor assessment.","og_url":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line","og_site_name":"Blog 3rdcomply","article_published_time":"2026-05-28T02:58:04+00:00","article_modified_time":"2026-05-29T02:09:20+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/3rdComply-blogs-3.png","type":"image\/png"}],"author":"3rdComply Admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"3rdComply Admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#article","isPartOf":{"@id":"https:\/\/3rdcomply.com\/blog\/2026\/05\/28\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\/"},"author":{"name":"3rdComply Admin","@id":"https:\/\/3rdcomply.com\/blog\/#\/schema\/person\/bb35af9c18abb4a214b43923eb82e2df"},"headline":"A Clean SOC 2 Report Not the Finish Line. It’s the Starting Gun.","datePublished":"2026-05-28T02:58:04+00:00","dateModified":"2026-05-29T02:09:20+00:00","mainEntityOfPage":{"@id":"https:\/\/3rdcomply.com\/blog\/2026\/05\/28\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\/"},"wordCount":611,"commentCount":0,"publisher":{"@id":"https:\/\/3rdcomply.com\/blog\/#organization"},"image":{"@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#primaryimage"},"thumbnailUrl":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/3rdComply-blogs-3.png","articleSection":["Compliance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#respond"]}]},{"@type":"WebPage","@id":"https:\/\/3rdcomply.com\/blog\/2026\/05\/28\/https-3rdcomply-com-blog-clean-soc2-report-not-the-finish-line\/","url":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line","name":"A Clean SOC 2 Report Is Not the Finish Line","isPartOf":{"@id":"https:\/\/3rdcomply.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#primaryimage"},"image":{"@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#primaryimage"},"thumbnailUrl":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/3rdComply-blogs-3.png","datePublished":"2026-05-28T02:58:04+00:00","dateModified":"2026-05-29T02:09:20+00:00","description":"A clean SOC 2 report isn't the finish line it's the starting gun. Here's what TPRM professionals should check before closing any vendor assessment.","breadcrumb":{"@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#primaryimage","url":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/3rdComply-blogs-3.png","contentUrl":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/3rdComply-blogs-3.png","width":1280,"height":720,"caption":"A clean SOC 2 report is just the starting point not the conclusion of your vendor risk assessment."},{"@type":"BreadcrumbList","@id":"https:\/\/3rdcomply.com\/blog\/clean-soc2-report-not-the-finish-line#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/3rdcomply.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Home > Blog > A Clean SOC 2 Report Is Not the Finish Line"}]},{"@type":"WebSite","@id":"https:\/\/3rdcomply.com\/blog\/#website","url":"https:\/\/3rdcomply.com\/blog\/","name":"Blog 3rdcomply","description":"","publisher":{"@id":"https:\/\/3rdcomply.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/3rdcomply.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/3rdcomply.com\/blog\/#organization","name":"Blog 3rdcomply","url":"https:\/\/3rdcomply.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/3rdcomply.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/cropped-3rdcomply-logo.png","contentUrl":"https:\/\/3rdcomply.com\/blog\/wp-content\/uploads\/2026\/05\/cropped-3rdcomply-logo.png","width":1476,"height":511,"caption":"Blog 3rdcomply"},"image":{"@id":"https:\/\/3rdcomply.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/3rdcomply.com\/blog\/#\/schema\/person\/bb35af9c18abb4a214b43923eb82e2df","name":"3rdComply Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/89bbd999f531f3c9baae50351f2903ff5eb6b023441032e887f868105af2b47d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/89bbd999f531f3c9baae50351f2903ff5eb6b023441032e887f868105af2b47d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/89bbd999f531f3c9baae50351f2903ff5eb6b023441032e887f868105af2b47d?s=96&d=mm&r=g","caption":"3rdComply Admin"},"url":"https:\/\/3rdcomply.com\/blog\/author\/alya\/"}]}},"_links":{"self":[{"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/posts\/617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/comments?post=617"}],"version-history":[{"count":4,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/posts\/617\/revisions"}],"predecessor-version":[{"id":624,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/posts\/617\/revisions\/624"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/media\/621"}],"wp:attachment":[{"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/media?parent=617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/categories?post=617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/3rdcomply.com\/blog\/wp-json\/wp\/v2\/tags?post=617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}