Not like a lot of compliance rules, SOC compliance is often not required to work in a very supplied industry like PCI DSS compliance is for processing payment card info. In general, companies need a SOC audit when their buyers request a single. Use robust cryptography when transmitting cardholder details https://www.nathanlabsadvisory.com/market-research-intelligence.html