What we learned (and can share) from passing our SOC 2 Type II audit