Once you have determined which evaluation you should complete, the following move is always to execute the assessment, comprehensive the applicable SAQ or ROC documentation, and post it to Stripe for evaluation. The difference between the different types of SOC audits lies in the scope and length from the assessment: https://www.nathanlabsadvisory.com/cis-center-internet-security.html