Glossary / E-commerce & payments

PCI compliance (PCI DSS)

PCI DSS is the card industry's security standard for anyone who processes, stores, or transmits cardholder data. The practical strategy for most businesses is scope reduction: let a certified gateway handle card data through hosted fields or redirects, so your own systems never see a card number and your compliance burden drops to a short questionnaire. Full PCI scope is for payment companies, not shops.