How to get GDPR/ HIPAA compliant?

We’re a SaaS company & have decided to work on getting SOC 2 compliant. Based on initial research, I found that,
- we will need to define & implement controls within the company
- gather evidence that we are properly implementing the controls
- show it to an auditor & get their report

We’re thinking of using some compliance automation tools ( like Vanta, Drata etc. ) for evidence gathering as it appears most of the tools integrate …

amp auditor controls cybersecurity evidence found gdpr hipaa report research saas soc soc 2 the company work