Entities that can certify SOC 2: Certified public accountants or CPA firms.