When Merchants indication a deal with a payment processor, they agree to be matter to fines should they fail to take care of PCI DSS compliance. Formally attest your compliance. An AOC (attestation of compliance) is the form you use to signal that you simply’ve reached PCI DSS compliance. Ending https://www.nathanlabsadvisory.com/blog/nathan/understanding-soc-2-a-guide-to-compliance-and-reporting/