Contrary to lots of compliance polices, SOC compliance is usually not necessary to work inside of a supplied business like PCI DSS compliance is for processing payment card info. Usually, providers have to have a SOC audit when their buyers ask for a person. The GDPR safeguards private data regardless https://www.nathanlabsadvisory.com/blog/category/nathan/page/5/