Yes, you should. The primary reason is that SOC 2 compliance is required for all committed, technology-based service organizations that store client information in the cloud.