SOC 2 header comments