While they are not a strict Compliance Requirement, many business in the PII realm will not conduct business and can't afford to conduct business with organizations that do not have these certifications. I'm surprised that as a business that is providing a compliance tool, you don't hold or plan to hold these certifications very soon.