A deal died at security review because you had no SOC 2 Type 2 report. Starting an audit tomorrow will not get it back, because the observation window cannot be compressed. What SOC 2 actually is, what drives the cost, seven things that unblock a deal faster than a report, and when a $40k contract is not worth a compliance programme.