PCI DSS Payment Card Industry Data Security Standard
Security standard anyone handling credit card data must follow — required by Visa, MasterCard, Amex.
Levels based on transaction volume. Requirements: encryption, network segmentation, regular pentests, audit logs. Stripe/Adyen lift the PCI burden: card data never touches your server. Breaching PCI = large fines, loss of merchant status.