It concerns pointers regarding how to interpret Main principles of the GDPR and can problem binding decisions tackled to the data safety authorities on dispute in concrete situations about cross-border processing. The difference between the different sorts of SOC audits lies while in the scope and period of the evaluation: https://www.nathanlabsadvisory.com/sox.html