It problems recommendations on how to interpret core ideas of your GDPR and may difficulty binding decisions dealt with to the data security authorities on dispute in concrete situations about cross-border processing. The distinction between the different types of SOC audits lies from the scope and duration from the assessment: https://www.nathanlabsadvisory.com/cybersecurity-fintechs.html