In contrast to many compliance rules, SOC compliance is typically not necessary to work in a very specified market like PCI DSS compliance is for processing payment card data. In general, companies have to have a SOC audit when their consumers request just one. Handling the entry of bank card https://www.nathanlabsadvisory.com/blog/author/nathan/page/4/