You have to test restoration as part of SOC 2, so most companies with real customers do it at least once a year.