As Element Of PCI facts security requirements, Bodily cardholder information should even be stored inside of a protected location, like a locked home or storage space with limited accessibility. The distinction between the different types of SOC audits lies within the scope and length of your assessment: Immediate API SAQ https://www.nathanlabsadvisory.com/blog/nathan/soc-2-certification-in-saudi-arabia-why-your-business-needs-it-today/