The RSI Security site breaks down the actions in certain element, but the procedure in essence goes like this: Includes a new illustrative report that may be utilised when performing and reporting with a SOC 2+ assessment. Stripe.js v2 SAQ A-EP Making use of Stripe.js v2 to move card data https://www.nathanlabsadvisory.com/blog/tag/dpias/