PCI DSS requirements apply to merchants, banks, providers of all kinds of services and services, retail stores, call centers and other organizations whose activities are related to the processing, transmission and storage of payment cardholder data. That is, if your organization stores, processes or transmits at least one payment card number during the year, then you, as a company, must comply with the requirements of this standard. More detailed information on what steps to take pci compliance
https://www.verygoodsecurity.com/blo...-days-with-vgs are posted on the blog.