We’re not just PCI DSS Compliant. We are Certified.
PCI compliance means a company has taken steps to help protect Card Holder Data (CHD) following the guidelines set by the PCI Council. Whereas PCI certification is a rigorous and comprehensive process that involves a full-scale audit by a qualified security assessor (QSA).
During a PCI certification audit, the QSA validates all areas of the business that come in contact with CHD to ensure proper controls and security measures are in place to protect the customer.
all of which takes up to six months to complete. In short, PCI certification is proof, whereas compliance is a claim.
STAAH being fully PCI certified means that: