A healthcare SaaS had 90 days, a signed enterprise deal on the line, and no formal controls. Here is how we ran their SOC 2 readiness and how they cleared their first audit.