Not like a lot of compliance rules, SOC compliance is often not mandatory to work inside a presented field like PCI DSS compliance is for processing payment card details. Generally, businesses have to have a SOC audit when their shoppers request a single. Use sturdy cryptography when transmitting cardholder information https://www.nathanlabsadvisory.com/blog/tag/cybersecurity-resilience/