Personal information processing might be carried out by persons, or by private or community organisations, for example businesses or general public authorities. Their responsibilities and liability for specific information processing depend upon the purpose they Perform during the processing in query. SOC compliance is built to confirm to your service https://www.nathanlabsadvisory.com/blog/author/nathan/page/4/