Develop a timeline and delegate jobs (compliance automation software is likely to make this exercise a lot less time intensive) The distinction between the differing types of SOC audits lies in the scope and length with the assessment: Stripe.js v2 SAQ A-EP Making use of Stripe.js v2 to go card https://www.nathanlabsadvisory.com/blog/tag/data-processing-activities/