But there were always security regulations: PCI DSS, SOC 2, HIPPA, ISO 30001