ℹ️
Reference Content: This is a copy of content from the PCI Security Standards Council FAQ database, preserved for tracking changes over time.
View Original →
FAQ #1062 Published

What is meant by a "payment application" in Part 2d of the Attestation of Compliance?

A payment application is a commercial application that stores, processes, or transmits cardholder data as part of authorization or settlement. A common example of a payment application is the software running on a point-of-sale (POS) terminal. For information about payment applications used in your environment, contact the application vendor. For applications installed on a POS system, the POS terminal provider or your acquirer (merchant bank) may also be able to assist.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.