A SOC two needs to be finished by a accredited CPA agency. If you choose to make use of compliance automation software, it’s recommended that you choose an auditing organization that also provides this software Alternative for a more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/blog/tag/gdpr-compliance/