Back to Payments Glossary
Security & Compliance

PCI DSS

Payment Card Industry Data Security Standard — the security rules every business taking card payments must follow.

What It Is

PCI DSS (Payment Card Industry Data Security Standard) is the set of security rules every business taking card payments must follow.

It's maintained by the major card schemes and applies to every business that handles card data, regardless of size.

How It Works

Businesses complete an annual self-assessment and meet requirements for securely handling, processing and storing card data.

The questionnaire you complete depends on how you take payments — using integrated chip-and-PIN terminals usually keeps it simple.

When It's Necessary

Mandatory for all card-accepting businesses. Non-compliance can trigger monthly fees and higher liability.

Many businesses don't realise they're paying monthly non-compliance fees that a simple annual assessment would remove.

Business Impact

Staying compliant protects you from data breaches and fines. We include PCI support free, so there's no separate charge.

That means you stay compliant without the surprise PCI line items some providers add.

Quick Summary

  • What It Is
  • How It Works
  • When It's Necessary
  • Business Impact

Questions About PCI DSS?

Book a free rate review and we'll read your statement, explain exactly what you're paying, and show you where you could save — in plain English.