PCI Pal Glossary

PCI DSS Level 1 Service Provider

A PCI DSS Level 1 service provider is an organization that stores, processes, or transmits cardholder data on behalf of other entities and handles more than 300,000 transactions annually across all channels. Level 1 service providers face the most stringent compliance requirements, including mandatory annual on-site security assessments conducted by a Qualified Security Assessor (QSA) and quarterly network vulnerability scans by an Approved Scanning Vendor (ASV).

These providers play a critical role in the payment ecosystem and must demonstrate the highest level of security controls to protect the cardholder data they handle for their clients. Working with a Level 1 service provider can help merchants reduce their own compliance scope and benefit from enterprise-grade security infrastructure.

Back to the glossary

See also:

• PCI DSS Compliance
• Payment Service Provider