A SOC 2 have to be concluded by a certified CPA agency. If you decide on to make the most of compliance automation software, it’s recommended that you choose an auditing company that also provides this software solution for a more seamless audit. SOC 2 is definitely an auditing procedure https://www.nathanlabsadvisory.com/blog/nathan/hipaa-compliance-checklist-ensuring-data-security-in-healthcare/