This looks like a great product that could really help smaller orgs get through SOC2 while leveraging engineering to automate as much as possible. I base that statement on the extensibility offered here.
Are there any orgs that are self-hosting that can offer testimonials?