The Payment Card Industry Data Security Standard (PCI DSS) applies to companies that accept credit card payments. If your company intends to accept card payments, and to store, process, and transmit cardholder data, you need to host your data securely with a PCI compliant hosting provider on a PCI compliant server. Your Merchant Service Provider (credit card processor) will have asked you to comply with PCI standards if you are indeed accepting credit card payments on your site at your own cc gateway (e.g. WHMCS or some shopping cart script). Only if you utilize so-called 3rd party billing solutions such as 2CheckOut.com to process your customer's payments will you not be required to be PCI compliant (as your customers are then redirected to that 3rd party provider's website and server).

O u r   S e r v i c e : The actual implementation of many and complex PCI rules is quite a handful of work. Your patience and persistance is required. If you have already started the process, you are aware of this. There are parts of the PCI Compliance ruleset that we cannot legally help you with, as you have to confirm and sign in person (e.g. a statement regarding the access of your employees to the cc gateway). HOWEVER, we can very well assist you with the technical setup of the dedicated server or VPS used to install your cc gateway. The security issues are usually not with the gateway itself, if you keep updating that piece of software. The issues are always with the server OS and the control panel, with how that is secured, which services are running, what ports are open in the firewall, etc. The security hardening and the adjustments according to the PCI ruleset are indeed a complex series of tasks, consisting of many steps to be taken care of. The analytics program your Merchant Service Provider will require you to utilize will point you to the many security problems of a server with a "default" setup, e.g. a hosting server. We will take care of a one-time, first implementation of all the technical requirements, we will secure your dedicated server or VPS so it can pass the required PCI compliance test. Please remember that this is a PROCESS; your cooperation and committment while working on it (via email communications) is required. Also understand that we are in no way legally responsible for the security of your server (there are still things that can go wrong after our work is done). Finally, we will only offer this service for servers and VPS servers with a freshly installed OS, and only on servers running CentOS 7.x or CloudLinux as OS and cPanel as hosting control panel, and only on a dedicated server or a VPS server ordered from us.