SOC 2 Compliance for AI Systems