Audit Reports

If Sage x3 Doesn't have a SOC 1 report than can we get something alternative to this.

As SOC1 report is mandate to get the change management authorized.