If I process a low monthly volume, do I need to be PCI compliant?
Copied to clipboard
Yes, all merchants, whether small or large, are required to be compliant.
The payment brands have collectively mandated PCI DSS compliance for any and all organizations that process, store or transmit payment cardholder data.
The ability to handle cardholder data is inherent to having a merchant account.