PCI-DSS

Payment Card Industry Data Security Standard — the global standard for processing, storing or transmitting payment card data.

PCI-DSS v4.0 is the current revision, with v3.2.1 retired in March 2024. It applies to any entity that processes, stores or transmits payment card data. Compliance is validated via a Self-Assessment Questionnaire (SAQ) for lower-tier merchants, or a Report on Compliance (RoC) by a Qualified Security Assessor (QSA) for larger entities.