Payment Processor Due Diligence for Enterprise Vendor Files: SOC 1 vs SOC 2, PCI AOCs, and the Exhibits Your Auditors Expect
An enterprise payment processor due-diligence file should do more than prove that somebody downloaded a SOC report and an insurance certificate. It should show what services the processor performs, which legal entities...