Why SaaS Start-Ups Should Prioritize SOC 2 Compliance Unfortunately, all too often, cybersecurity is an after-thought for most SaaS start-ups and it will not be prioritized until a large enterprise customer starts asking questions pertaining to cybersecurity controls and if the company can provide them with a SOC 2 report.