I'm a solo entrepreneur running a b2b saas product I built. I do not have a soc2 certificate (or any certificate). I have never lost any sales (that I know of) because of it.

I've sold to customers that pay $2XX,XXX annually and it was never an issue. I wouldn't worry about it, but be prepared to answer security questionnaires.