# What is PCI DSS?

What is PCI DSS? Security requirements for any business handling credit card data. Non-compliance means fines and account termination.

## How it works in practice

Shopify and Stripe handle PCI compliance for you. The risk: storing card details in Excel or email is a serious problem.

## Related metrics

- Payment Gateway — a certified gateway handles it
- Tokenization — the technical tool
- SSL — part of the requirements
- Chargeback — non-compliance increases exposure

## Common misconception

'PCI doesn't apply to small businesses.' It applies to everyone. Level 4 (under 20K transactions/year) requires only a simple SAQ.

## How to fix it

Not sure? (1) is the gateway certified? (pcisecuritystandards.org), (2) are you avoiding storing card numbers? (3) fill out the SAQ.

## Real-world example

A phone-order store took orders and typed in card numbers — non-compliant. The solution: a Stripe payment link.

## Where to start

Are you storing card data anywhere? If so, stop immediately.

---

Category: Payments · From the [Jimmy OS KPI Glossary](https://jimmy-os.com/glossary/kpi.md) · Source page: https://jimmy-os.com/glossary/kpi/pci-dss