[Zambyte]

SOC2 is voluntary, not regulatory.

[bigfatkitten]

It's not voluntary if your customers have signed contracts with you on the basis that you gain and maintain that certification. And if they haven't, you shouldn't have wasted your money.