The Finer Points of a Third-Party Vendors SOC 2 Report