> We are required to do this by various certifications such as soc2 Some other certifications might, but SOC 2 certainly doesn't prescribe the list of courts y

> We are required to do this by various certifications such as soc2 Some other certifications might, but SOC 2 certainly doesn't prescribe the list of courts you need to check. A very superficial check can satisfy the control, SOC 2 mostly just cares that you have a control in place.