When you have identified which assessment you should total, another move would be to perform the assessment, total the pertinent SAQ or ROC documentation, and submit it to Stripe for assessment. PCI compliance is divided into 4 concentrations, depending on the annual variety of credit rating or debit card transactions https://www.nathanlabsadvisory.com/blog/nathan/stay-one-step-ahead-advanced-penetration-testing-solutions/