We are in the middle of SOC 2 certification — no new vendors until that is done.

"SOC 2 is critical and I respect the discipline. Our platform is already SOC 2 Type II certified — I can send you the report right now so your security review skips that step."

"Which stage of SOC 2 are you in — Type I or Type II? And does vendor approval fall inside or outside that process? Sometimes these run in parallel."

"We can start with a limited-scope pilot that does not touch production data — your SOC 2 review stays clean and we prove the value simultaneously. Interested?"