Describe a time you had to design a system that complied with strict regulatory standards such as PCI-DSS or SOC 2.