Mapping AI outputs to SOC 2 Type II controls — a practical guide.

Auditors are asking about AI now. Most compliance frameworks weren't written with generative models in mind. We mapped every output to existing controls and found the gaps.