PCI DSS compliance depends on your payment setup, website, business processes, and the services involved. Hosting alone does not establish that your business meets PCI DSS requirements, and a passing vulnerability scan is not a complete compliance assessment.
Before accepting card payments
- Ask your payment provider or acquiring bank which validation requirements apply to your business.
- Confirm what your payment provider handles and what remains your responsibility.
- Keep your website and payment integrations supported, updated, and protected.
- Do not collect payment-card details through ordinary contact forms, email, or support tickets.
Using a hosted payment service can reduce the systems involved in handling card data, but it does not remove all merchant responsibilities.
If a security scan reports a problem
Open a support ticket with the affected hostname, the scan date, and the relevant findings. We can investigate hosting-related issues and clarify the scope of the hosting service. Send reports through an agreed secure method if they contain sensitive information.
If your assessor needs a service-provider attestation or a description of shared responsibilities, contact us before relying on a particular hosting arrangement. Any compliance documentation must match the actual service and its current scope.
