← Glossary · security
PCI DSS
The Payment Card Industry Data Security Standard, which governs the handling of credit card data.
PCI DSS applies to any organization that stores, processes, or transmits cardholder data. The standard has 12 requirements covering network security, encryption, access control, and monitoring. The fastest path to compliance for most SaaS vendors is to outsource card handling to a PCI-certified processor (Stripe, Adyen, Braintree) so the vendor''s systems never touch raw card numbers. PCI levels 1 through 4 reflect transaction volume; level 1 (over 6 million card transactions per year) requires the most rigorous audit.