No clouds, no shared servers.
No clouds, no shared servers.
Every single merchant, regardless of size or processing volume, is required to be PCI compliant. You might want to have a look here...good reading for sure
<a href="http://www.aspdotnetstorefront.com">Shopping Cart Software</a>
So, as every merchant needs to be PCI compliant, if a merchant is using a hosting provider that is not PC compliant/accredited, the merchant is not compliant?
Or does it depend on what is going on at the hosting site? eg.....
a) storing cc data in a database
b) transmitting cc data to the payment provider
c) using payment provider payment page
Presumably c) the provider doesnt have to be PCI compliant, and a) the provider does have to be PCI compliant.......what about b) when nothing is being stored, just transmitted?
Reason for the question is that asking
- different hosting providers gets different answers
- different merchants gets different answers
- presumably different assessors would also give different answers (I have heard loads of stories about retailers going from one assessor to another until they found one that gave them the tick in the box!!!)