What types of businesses are allowed to store SAD and in particular CVV data?

There must be some kind of business that requires the use of SAD data. Could someone point me in the right direction on the requirement for the storage of that data?