Is AI compliance a real concern or just SOC 2 with more paperwork?

Full disclosure here (not trying to promote) - I'm a software engineer and I'm looking to build in the AI agent security space. I've done a quite a bit of research over the past few months and now I'm looking to see how this comes into play at real companies. It's been pretty easy reading up on the