SOX compliance does deal with publicly traded companies. However, if a privately held organization does business with ANY publicly traded company....they can be investigated and held accountable as well. Something to think about. Take care