A practical guide to getting SOC 2 Type II certification for US startups - automation-first approach, CCPA/state privacy …