You should not get SOC2, ISO27k, etc certified unless a customer demands it. Even then, as a 1 person company, you can probably push back and stress the simplic

You should not get SOC2, ISO27k, etc certified unless a customer demands it. Even then, as a 1 person company, you can probably push back and stress the simplicity of your operation to avoid it.