Compliance for Fintech Companies

Which frameworks a payments or lending startup has to satisfy, where SOC 2 and PCI DSS overlap, and what each adds on its own.