
PCI DSS v4.0 changed ecommerce PCI compliance significantly, with new script management requirements and revised SAQ A eligibility criteria effective in 2025. This guide covers compliance levels, SAQ types, scope reduction through tokenization, and documentation requirements for annual assessments.

Payment processors and payment gateways handle different parts of every card transaction. Here’s how to tell them apart, how they work together, and why a payment orchestration layer makes managing both easier.