Category Archives: pci-scope

Would a domain registrar be considered a Service Provider for PCI compliance if it never touches its customer’s card holder data?

Posted on by

Hypothetical:

Company A accepts credit card payments and must be PCI compliant.
Company B provides domain registration (but not DNS or web hosting) services to Company A.
Some of these domains are used by Company A to accept credit card d… Continue reading Would a domain registrar be considered a Service Provider for PCI compliance if it never touches its customer’s card holder data?→

PCI scope "Encrypted cardholder data that is accessible to an entity that also has access to the decryption key"

Posted on by

I have a question related to this FAQ:
https://pcissc.secure.force.com/faq/articles/Frequently_Asked_Question/How-does-encrypted-cardholder-data-impact-PCI-DSS-scope?q=how+does+encrypted+data+impact+the+scope&l=en_US&fs=Search&… Continue reading PCI scope "Encrypted cardholder data that is accessible to an entity that also has access to the decryption key"→

Configure Spring application deployed in AWS Elastic Beanstalk to use SSL

Posted on by

I deployed successfully Spring application into AWS Elastic Beanstalk which us going to be used as Rest endpoint by Angular app deployed into Cloudfront service. I want to encrypt the communication between Angular and Spring with SSL. What… Continue reading Configure Spring application deployed in AWS Elastic Beanstalk to use SSL→

What level of PCI compliance is required, and who is responsible for having it, where a white label app is involved?

Posted on by

We have developed a mobile application that integrates with systems of record of our clients via a middleware application.
This application, amongst other things, can integrate with product systems and create a basket of goods.
Currently t… Continue reading What level of PCI compliance is required, and who is responsible for having it, where a white label app is involved?→