My point was that compliance is about trust. If I want to go the SOC2 or ISO27001 route, I want a company that has done it before.
Free in your case is not free, it's pretty expensive. If I can't comply in time, that might mean losing potential business, being late to the market, etc.
Good luck though, you made the first step.