
If you are a business or organization that stores, process or transmits credit cards with the logos of any of the five members of the PCI SSC (Amex, Discover, JCB, MasterCard or Visa) you are subject to PCI and are most likely a merchant. Your organization's PCI Level depends on how many transactions per year your organization processes.
While not a payment brand, service providers are directly involved in the processing, storage or transmission of credit card data on behalf their customers or other organizations. This includes companies that provide services (such as web hosting, managed services, etc.) that control or could impact the security of cardholder data.



Your level was derived based on the following:
