SOC 2 Type IIISO 27001GDPR · EU data residency