It problems rules regarding how to interpret core principles from the GDPR and can issue binding conclusions resolved to the info safety authorities on dispute in concrete instances about cross-border processing. The distinction between the different types of SOC audits lies within the scope and period from the assessment: Compliance https://www.nathanlabsadvisory.com/blog/tag/data-processing-activities/