Comment by abustamam

> Yoti is an independently audited age verification provider for SOC2 compliance.

I worked for a consulting firm and I needed a client to get SOC2 compliant.

The way we did it was scarily easy. It was like a self questionnaire that was like "we dont log PII" and other stuff like that. I could have lied and said yes to everything and still got compliant. I thought I was gonna have a meeting with someone to audit my answers and codebase but instead I got a shiny badge after about an hour of answering questions.

Anyway, there are many SOC2 compliant companies that get pwnd so this isnt really reassuring in itself.