Not like a lot of compliance rules, SOC compliance is often not required to work in a very specified sector like PCI DSS compliance is for processing payment card information. Generally speaking, corporations require a SOC audit when their consumers ask for just one. Use strong cryptography when transmitting cardholder https://www.nathanlabsadvisory.com/privacy-policy.html