When you have discovered which assessment you should complete, another move is to carry out the assessment, complete the relevant SAQ or ROC documentation, and submit it to Stripe for evaluation. The distinction between the different sorts of SOC audits lies in the scope and duration from the evaluation: Compliance https://www.nathanlabsadvisory.com/blog/nathan/navigating-cybersecurity-and-risk-management-a-deep-dive-into-nathan-labs-expertise/