Congrats on the launch!

I imagine you'll be able to find a number of startups / SMB willing to connect their systems to yours to facilitate integrations like this.

But as you start to go upmarket, you'll run into people who won't use your service unless you can quell their security concerns. Generally I wouldn't recommend thinking about things like SOC 2, ISO 27001, etc this early on, but in your case it might be a worthwhile investment earlier rather than later considering the sensitivity of the data / integrations and access your systems have to PII. I see Vanta's logo on your homepage, that's a great place to start for SOC 2.

Best of luck to you!