You need certified compliance
We hold no SOC 2 or HIPAA certification and we run no regulated-industry audit programme. We will not claim otherwise to win the work. If a certificate is a procurement requirement, an enterprise firm is the safer choice and we will say so on the first call.