A deal is going well. Then their security team joins the thread, and you get some version of this: Please complete the attached vendor security assessment and share your SOC 2 report, subprocessor list, and DPA. The spreadsheet has 140 rows.
Source: [Dev.to](https://dev.to/plainanswer/your-first-enterprise-security-questionnaire-and-you-have-no-soc-2-19mc)