data security marketing legal compliance soc 2 IT