A SOC 2 have to be done by a licensed CPA business. If you decide on to employ compliance automation software, it’s proposed that you choose an auditing firm that also provides this software Answer for a far more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/blog/nathan/how-to-achieve-pci-dss-compliance-certification-in-the-usa-quickly/