If you’re a B2B SaaS with no CRO, good luck with vendor assessments. B2C you can skip it before reaching a critical mass where regulatory pressures will mandate it.