News for hackers. Stuff that matters.

A comment on Ask HN: How to be SOC2 Type 2 compliant as a solo-entreprenuer?. Parent comment

Re:Ask HN: How to be SOC2 Type 2 compliant as a solo-entrepr... by blochist on Friday May 15, 2026 @10:03AM (#48148740)
SOC2 is, at the end of the day, a voluntary compliance standard. HIPAA and FERPA requirements are federal law. Waiving those requirements would not just mean accepting additional liability, but would normally make your customer ineligible to receive federal funds, which are typically a substantial chunk of revenue.
[ Parent | on HN ]
Re:Ask HN: How to be SOC2 Type 2 compliant as a solo-entrepr... by tptacek on Friday May 15, 2026 @12:03PM (#48150302)
Compliance with HIPAA for small firms is generally straightforward and there isn't a standard audit. It's not the same animal as SOC2, which is a CPA standard and is administered by certified auditors.
[ Parent | on HN ]
Re:Ask HN: How to be SOC2 Type 2 compliant as a solo-entrepr... by Grimburger on Saturday May 16, 2026 @04:30AM (#48158108)
You have it completely the wrong way around.

HIPAA is self-certifying, SOC2 isn't.

No way on earth you are getting SOC2 without an auditor.

[ Parent | on HN ]