You could look at the process itself and apply the things that sound good to you. It won't help with official certificates but you can start replying back saying you adhere to certain things that are suggested by SOC 2 Type 2.

I can also say that being SOC 2 Type 2 compliant doesn't come even remotely close to demonstrating that you can be trusted. That's not a knock on you or your work ethic, but there's tons of ways for things to go wrong or get leaked while still being SOC 2 Type 2 certificated.