My guess is that notion mail is on the way to Soc 2 type 2. You start by getting type 1 and then get evaluated for 2 after a period of time.

I was surprised that our auditors wanted to re-do Soc 2 for our second product rather than just apply it to the company.