A SOC 2 need to be concluded by a accredited CPA business. If you select to make use of compliance automation software, it’s recommended that you select an auditing business that also provides this software Resolution for a more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/blog/tag/iso-27001/