When retailers indicator a contract which has a payment processor, they conform to be subject to fines when they fall short to take care of PCI DSS compliance. SOC compliance is meant to establish into a service provider’s consumers that a company can provide the services that it's contracted for. https://www.nathanlabsadvisory.com/blog/tag/financial-institutions/