PCI DSS

PCI DSS applies to any SaaS platform that stores, processes, or transmits cardholder data. Contracts with payment processors and merchants often mandate specific PCI compliance levels and regular penetration testing.