An audit that evaluates a service provider's internal controls over a six-month period and adheres to Statement on Auditing Standard 70. (SAS 70.) The Securities and Exchange Commission (SEC) recognizes an SAS 70 Type II audit as an appropriate method of obtaining an auditor's opinion for Sarbanes-Oxley (SOX) Section 404.