Ostendio SOC 2 Compliance vs Windows Secure Host Baseline (2026)