As Part of PCI information security expectations, Bodily cardholder info should even be saved inside of a secure locale, like a locked place or storage location with restricted accessibility. Formally attest your compliance. An AOC (attestation of compliance) is the shape you utilize to sign that you’ve obtained PCI DSS https://www.nathanlabsadvisory.com/3rd-party-security-audit-assessment.html