Compliance

SOC II, or System and Organizational Controls, type 2, is a framework that provides independent assurance on the effectiveness of an organization's controls over information-related risk. These audits are conducted by independent auditors and assess an organization's controls over security, availability, processing integrity, confidentiality, and privacy.

PCI DSS, or The Payment Card Industry Data Security Standard is a set of security standards designed to protect cardholder data. It's administered by the Payment Card Industry Security Standards Council, and mandated by the credit card brands to help reduce the risk of credit card fraud.