SOC 2 compliant payment platform