[grinich]

When you're going through SOC-2, your auditor will ask for the SOC-2 report of each critical vendor.

[tomschlick]

If you're at that level of auditing I'd expect your company has enough cash to fork over for GHE.