@skylar @eriner @sapphire there are multiple tiers to pci compliance based on type of business and how much money you process, the first two tiers are mostly self reporting but the second tier also requires an auditor, who guaranteed, will ask you the dumbest questions you have ever heard