A SOC 2 must be done by a licensed CPA agency. If you choose to employ compliance automation software, it’s encouraged that you select an auditing organization that also offers this software Alternative for a far more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) is the https://www.nathanlabsadvisory.com/application-security-testing.html