Can we PLEASE get over talking semantics and “Letter of the Law”? From a high level, they are the same concept. SRP might have a slightly more narrow definition of successful compliance as it’s essentially SoC 2.0, but from a basic, mile high perspective, they are the same,