A practical SOC 2 / ISO 27001 buyer’s checklist for brokers evaluating CRMs and trading platforms—what to ask, what evidence to request, and what “certified” really means.