The Data controller determines the reasons for which plus the means by which particular info is processed. This enables all companies—from substantial providers to startups and compact and medium enterprises, which may not hold the requisite security infrastructure and employees—to stay guarded and PCI DSS compliant. Stripe.js v2 SAQ A-EP https://www.nathanlabsadvisory.com/nerc-cip-compliance.html