I haven't had a chance to study the docs yet, but will within the next week or so. Our basic questions are: (1) would a certification be useful for our business? (beyond the obvious security benefits) and (2) if so, which certification? ISO, SSAE, etc.
1) There can be various reasons to get the certification, here you can find more information about this Should your company go for the ISO 27001 / ISO 22301 certification? : https://advisera.com/27001academy/iso-27001-certification/
2) ISO has more prestige at international level, so if you want a certificate with an international recognition, we recommend you ISO.