Who Needs to Comply with PCI DSS | PCI DSS

Who Needs to Comply?

Handles card data? Then compliance isn't optional, it's your shared responsibility.

Your transaction volume determines the rules you play by.

For merchants processing over 6 million transactions annually. Requires a full Report on Compliance (ROC), conducted by a QSA.

Breaches or brand mandates can also force Level 1 designation—regardless of transaction volume.

Every transaction endpoint counts—compliance applies, whether online or in-store.

Ready to learn more about Compliance Lifecycle?