Comment by sochix

What kind of documents should I show customers to make them trust me that I follow best security practices? They trust Soc2 Type2, what else could work?