Not like many compliance rules, SOC compliance is typically not required to operate in a provided market like PCI DSS compliance is for processing payment card facts. Generally speaking, businesses need a SOC audit when their customers ask for 1. Your business is service company based mostly outside the EU. https://www.nathanlabsadvisory.com/blog/author/nathan/page/4/