Remove Audit Remove Legal Remove TPSP
article thumbnail

PCI requirements and who needs to follow them

Basis Theory

On the other hand, organizations with Levels 2, 3, or 4 use Self-Assessment Questionnaires (SAQs) to audit their compliance program. Third-Party Service Provider ( TPSP or "service provider") refers to an entity other than the Merchant, Acquirer, or Issuer involved in storing, processing, or transmitting card data.

PCI DSS 88