PCI DSS compliance is a requirement for any business handling cards to protect cardholder data. The most common certification recognised is merchant compliance, basically for those taking card payments. While we are certified as a merchant, more importantly, for our secure shredding services, we are certified as a service provider to the highest level (Level 1).
What is a service provider?
A service provider is defined as a:
“Business entity that is not a payment brand, directly involved in the processing, storage, or transmission of cardholder data (CHD) and/or sensitive authentication data (SAD) on behalf of another entity. This includes payment gateways, payment service providers (PSPs), and independent sales organisations (ISOs). This also includes companies that provide services that control or could impact the security of CHD and/or SAD. Examples include managed service providers that provide managed firewalls, IDS, and other services as well as hosting providers and other entities.
If an entity provides a service that involves only the provision of public network access—such as a telecommunications company providing just the communication link—the entity would not be considered a service provider for that service (although they may be considered a service provider for other services).”
– PCI Security Standards Council Glossary, available at: https://www.pcisecuritystandards.org/pci_security/glossary#S
Secure destruction of cardholder data
Level 1 Service Provider PCI DSS compliance allows us to handle and destroy your cardholder data to the highest level of security. We can destroy both paper and electronic media, so you can ensure your own PCI compliance is met.
View our PCI certification and other accreditations here.
Contact one of our shredding specialists for more information.