I'm part of a security team for an organization and as part of our vendor assessment process I need to obtain security information including SOC 2 reports, pen test reports, and other material to evaluate the security of Metabase. I understand the data will be hosted on our own infrastructure, Metabase does state they have a SOC 2 report and are compliant with legal regulations.
It would be nice to log in and be able to obtain the SOC 2 report. How can I obtain the SOC 2 report and executive summary of the pen tests for my records because we undergo our own audits and it is generally requested? Thanks!