PCI DSS Compliance

PCI DSS, Payment Card Industry Data Security Standard, compliance is the set of security requirements operators must meet whenever they accept, process, or store credit card payments.

Any operator taking card payments, at the kiosk, online, or over the phone, has some level of PCI DSS obligation, even if a payment processor or booking platform handles the technical heavy lifting. Compliance covers things like how card data is stored, transmitted, and secured, and failing to meet it can result in fines or increased liability if a breach occurs.

Operators using a booking and POS system that's PCI compliant by design, so card data never touches their own servers directly, carry much less of this burden themselves than those managing payment security on their own.