Not like lots of compliance rules, SOC compliance is usually not necessary to work in a very offered business like PCI DSS compliance is for processing payment card facts. Normally, organizations require a SOC audit when their prospects request a person. Your business is service provider centered outside the EU. https://www.nathanlabsadvisory.com/blog/nathan/navigating-data-protection-impact-assessments-dpias-under-gdpr-a-comprehensive-guide/