#PCI-DSS Compliance

3 messages · Page 1 of 1 (latest)

sick flickerBOT
#

Please provide your project ID or reply with N/A. Thread will automatically be closed if no reply is received within 10 minutes. You can copy your project's id by pressing Ctrl/Cmd + K -> Copy Project ID.

#

No project ID was provided. Closing thread.

candid shaleBOT
#

New reply sent from Help Station thread:

Hey there!

The fact you are using Railway to host your application will not inherently make you PCI-DSS compliant. Using Railway could form a part of the wider framework in which you prove PCI-DSS compliance, but the company who owns the product which is required to be PCI-DSS compliant must follow all the steps outlined here in order to prove compliance: https://www.indeed.com/career-advice/career-development/how-to-get-pci-compliance-certification

Usually the minimum is quarterly security scans, which will vary based on your infrastructure, as well as a self-assessment questionnaire (SAQ) or report on compliance (ROC). If you are unclear on any of this, you should engage the services of a PCI Compliance Consultant to understand how you can meet the criteria within the specifics of your business.

You're seeing this because this thread has been automatically linked to the Help Station thread.