When you have identified which assessment you'll want to total, the following move is always to perform the assessment, total the relevant SAQ or ROC documentation, and post it to Stripe for evaluate. Dealing with the entry of credit card info from customers; specifically, that sensitive card particulars are gathered https://www.nathanlabsadvisory.com/blog/nathan/navigating-data-protection-impact-assessments-dpias-under-gdpr-a-comprehensive-guide/