Does PCI DSS apply to your company?
Required to sell when: We handle payment-card data
PCI DSS v4.0.1 — a card-network contractual mandate for anyone storing/processing cardholder data
See the full list for this profileA prioritization aid, not legal advice. Every basis is shown so your counsel can check it.