As Element of PCI information security criteria, Bodily cardholder information have to also be stored in a protected locale, like a locked room or storage place with restricted access. SOC 2 is an auditing course of action that assures your service suppliers securely control your details to protect the interests https://www.nathanlabsadvisory.com/blog/tag/information-security/