I don’t know what Storj has been doing to work on that long term goal. Certainly this is something for politics, industry associations and alliances. To raise the voice to get heard by those who are creating such certification requirements.
For SOC2 it seems that the relevant Association is AICPA where Storj even could become a member.
But maybe we are all wrong and a system like Storj DCS could already be compliant? Like what we have learned about the GDPR.
Has Storj ever consulted with a professional SOC2 auditor and have checked if the public Storj DCS network in its current state cannot be considered compliant for sure?