A SOC 2 needs to be finished by a accredited CPA firm. If you decide on to employ compliance automation software, it’s suggested that you select an auditing agency that also offers this software Remedy for a far more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/cloud-computing-security.html