SOX was a law passed in the aftermath of a number of major public company scandals like Enron. The bill covers what is expected of corporate directors and executives around internal access, disclosure and retention controls. It’s enforced by the SEC.