--- title: What Defines PCI Scope? description: Knowing what is within PCI scope isn’t easy. Get familiar with the components that may put your business within scope. image: https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/pci-scope-defined.svg --- [tel:1-800-601-0230](tel:1-800-601-0230) 800-601-0230 - Features - Solutions - Developers - [Pricing](https://www.payjunction.com/payments/pricing.html) - Resources [See a Demo](https://www2.payjunction.com/tour-payjunction) Features - EXPLORE PRODUCTS [No-code Payments Integration®](https://www.payjunction.com/payments/no-code-payments-integration.html) [ZeroTouch Terminal](https://www.payjunction.com/payments/smart-terminal.html) [Portable Terminal](https://www.payjunction.com/payments/portable-credit-card-reader-terminal.html) - ACCEPT PAYMENTS [Invoices](https://www.payjunction.com/payments/electronic-invoices.html) [ACH Electronic Checks](https://www.payjunction.com/payments/ach-payments.html) [SmartSurcharge®](https://www.payjunction.com/payments/smart-surcharge.html) [Cards on File](https://www.payjunction.com/payments/store-credit-card-info.html) [Rapid Refunds](https://www.payjunction.com/payments/credit-card-refund.html) [Recurring Billing](https://www.payjunction.com/payments/recurring-payments.html) [Ecommerce](https://www.payjunction.com/payments/ecommerce-merchant-services.html) [Mobile App](https://itunes.apple.com/us/app/payjunction/id1324839420?ls=1&mt=8) - EXPLORE CAPABILITIES [Overview](https://www.payjunction.com/payments/payment-processing-solutions.html) [Integration Marketplace](https://integrations.payjunction.com/) [Remote Signature](https://www.payjunction.com/payments/signature-capture.html) [Multi-Location](https://www.payjunction.com/payments/enterprise-payments.html) [Sales Reports](https://www.payjunction.com/payments/sales-reports.html) [Search and Export](https://www.payjunction.com/payments/transaction-history-search.html) [Customization](https://www.payjunction.com/payments/custom-payment-software.html) Solutions - [Veterinary Streamline payment workflows and get paid faster with up-front deposits and payment schedules for high-cost procedures. Get time back and spend it with furry patients.](https://www2.payjunction.com/payment-processing-veterinarians) - [Dental Simplify patient payments with multiple means of collection at your dental practice. Meet patient expectations and elevate the payment experience.](https://www2.payjunction.com/payment-processing-dentists) - [Auto Dealer Manage dealership payments by department, brand and location. Get automated reports for simplified end-of-day close and save on processing fees.](https://www2.payjunction.com/automotive-merchant-services) Developers - [API Documentation See how to embed omnichannel payment features into your software, using your choice of our intuitive integration methods.](https://developer.payjunction.com/) - [Developer Experience Explore the developer journey and learn how our full-service partnership model helps you maximize merchant payment adoption rates.](https://www.payjunction.com/payments/payment-api.html) - [No-code Payments Integration® Rapidly integrate payment acceptance features into any SaaS application in minutes using our easy-to-use Chrome browser extension.](https://www.payjunction.com/payments/no-code-payments-integration.html) - [Integration Marketplace Check out our growing marketplace of integrated solution partners that streamline payment acceptance and help businesses automate and scale.](https://integrations.payjunction.com/) [Pricing](https://www.payjunction.com/payments/pricing.html) Resources - [About Us Learn how our people-first culture at PayJunction helps us earn widespread recognition and awards.](https://www.payjunction.com/payments/about.html) - [Careers Join us in our pursuit to deliver exceptional experiences to customers and partners.](https://www2.payjunction.com/careers) - [Support Get helpful information about how to use features, troubleshoot problems and contact us.](https://support.payjunction.com/) - [Blog Gain useful insights into payment industry trends and PayJunction solutions.](https://blog.payjunction.com/) - [Guides Up your payment processing knowledge with our in-depth eBooks and White Papers.](https://guides.payjunction.com/) - [Tutorials Read articles and watch videos about how to use valuable features on the PayJunction platform.](https://blog.payjunction.com/topic/pj-university) # What Defines PCI Scope? ![What Defines PCI Scope?](https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/pci-scope-defined.svg) [![Picture of Ursula Librizzi](https://blog.payjunction.com/hs-fs/hubfs/Ursula_Librizzi.jpg?width=48&height=48&name=Ursula_Librizzi.jpg) Ursula Librizzi](https://blog.payjunction.com/author/ursula-librizzi) 6/20/2017 Whether you’re a [player in the payments space](https://blog.payjunction.com/credit-card-processing-middlemen/) or a business processing credit cards, you’ve heard of [Payment Card Industry](https://www.pcisecuritystandards.org/) (PCI) compliance. With the intention to optimize security around credit and debit card transactions and protect cardholder information, all parties involved in facilitating a transaction fall within PCI scope. This includes any system components connected to the cardholder data environment (CDE). Processing credit cards can involve many different components, so PCI scope varies depending on the breadth of an organization's CDE. Because of this, many businesses are unaware of the components they are responsible for and which even fall within scope. Bottom line, anything that stores, processes or transmits cardholder data must be [PCI compliant](https://blog.payjunction.com/pci-dss-compliance-checklist). ## Payment Processing Demo Schedule 15 minutes with a payments expert Get a customized PayJunction product walk-through Understand requirements and pricing Determine your SAVINGS! GET DEMO NOW ## Components Within PCI Scope The PCI Security Standards Council defines scoping as “ … the identification of people, processes, and technologies that interact with or could otherwise impact the security of the cardholder data (CHD).” An easy way to identify these components is by understanding how cardholder data flows. ## Networks Networks are comprised of physical connections, such as Ethernet, wireless connections like Bluetooth and virtual connections like firewalls. All of these are used, in combination, to communicate information between computers, servers and applications. Sounds like any business using modern technology is within scope, right? That’s true, which is why network segmentation exists. Segmentation prevents “ ... out-of-scope systems from being able to communicate with systems in the CDE or impact the security of the CDE.” This can be done by isolating where cardholder data is stored. Servers provide services to other programs or devices, one of which is storing data. Cardholder data can either be stored on a business's server, putting it within scope, or on the provider's server. Where data is stored is contingent upon the type of software used to process the transactions (more on that later). ## Applications Applications intake cardholder data, so they’re always within scope. These include retail and mobile point-of-sale (POS) systems — including the [credit card terminal](https://blog.payjunction.com/credit-card-terminal-guide/) — [Virtual Terminals](https://blog.payjunction.com/virtual-terminal-credit-card-processing) or Payment Gateways, e-commerce websites and management softwares (i.e., patient management systems). With the number of integrations available to streamline workflows, it can be easy to overlook which are within scope. Applications should implement a security standard to secure cardholder data. A decent solution is point-to-point encryption (P2PE) which “ … encrypts data from the point of interaction (for example, at the point of swipe or dip) until the data reaches the solution provider’s secure decryption environment.” However, an ideal application uses [tokenization](https://blog.payjunction.com/point-to-point-encryption-cloud/). Integrating a P2PE solution provider (a.k.a. a Payment Gateway or Virtual Terminal) with a POS, [e-commerce](https://www.payjunction.com/payments/ecommerce-merchant-services.html) site or management software will reduce the PCI scope of your business, whereas tokenization can eliminate it. ## Software As we stated before, the software used to process transactions affects PCI scope. Some payment processing softwares are native, which use [middleware](https://blog.payjunction.com/emv-middleware-slows-processing-speeds/). Native software must be downloaded to your servers, which puts your services within the CDE and subjects your business to annual audits for [PCI compliance](https://support.payjunction.com/hc/en-us/articles/211053588). Using a cloud-based software removes your servers from scope because cardholder data is stored on the provider’s servers. With data encryption, your business is able to remotely access the encrypted data via the cloud. ## Know Your PCI Scope The majority of businesses subject to PCI are only required to self-report on compliance via a self-assessment questionnaire (SAQ), but that doesn’t mean PCI scope should be ignored. If any component is overlooked, your business could take a big financial hit. You’re responsible for stolen card data if your system is compromised, resulting in [fines for each card](https://www.ibm.com/security/infographics/data-breach) breached plus a major delay in regular sales. Understanding the extent of the CDE at your business will protect both you and your customers. Small businesses can follow [best practices](https://www.pcisecuritystandards.org/pdfs/PCISSC_SMB_Flyer_-web.pdf) established by the PCI Security Standards Council. Larger businesses should consider [awareness training](https://www.pcisecuritystandards.org/pdfs/course_description_for_awareness_v4.pdf) for their staff and get familiar with the level of compliance they are subject to. It’s never too late to up your PCI game with a secure [payment API](https://www.payjunction.com/payments/payment-api.html). Get started today. ## See how Sycle reduced its PCI scope. [![READ THE CASE STUDY](https://no-cache.hubspot.com/cta/default/635739/56079acb-32fa-4d4f-9d77-d4df336e5b0e.png)](https://cta-redirect.hubspot.com/cta/redirect/635739/56079acb-32fa-4d4f-9d77-d4df336e5b0e) Need help verifying if a component is within scope? Leave a comment below – we’d be happy to help you out! [Developer Resources](https://blog.payjunction.com/topic/developer-resources) [Security](https://blog.payjunction.com/topic/security) [Questions and Answers](https://blog.payjunction.com/topic/questions-and-answers) --- ##### [![Will an Electronic Signature Hold Up in Court?](https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/electronic-signature-legality.svg) Will an Electronic Signature Hold Up in Court?](https://blog.payjunction.com/electronic-signature-legality) ##### [![What Causes Interchange Fluctuation?](https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/interchange-fluctuation.svg) What Causes Interchange Fluctuation?](https://blog.payjunction.com/interchange-fluctuation) ###### About Author ![Picture of Ursula Librizzi](https://blog.payjunction.com/hs-fs/hubfs/Ursula_Librizzi.jpg?width=200&height=200&name=Ursula_Librizzi.jpg) ### Ursula Librizzi Ursula is the sales and marketing operations manager for PayJunction. She oversees daily marketing tasks and liaises between the sales and marketing departments. ###### Related Posts ## [![How to Select the Best API for Integrated Payments](https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/payment-api.svg) How to Select the Best API for Integrated Payments An API, or application programming interface, is a set of protocols and tools that let different types of software interface with each other. Developers use APIs to quickly add new features to their software. Payment service providers like PayJunction publish APIs that allow software providers and developers to easily add credit, debit and ACH payments within their core software for in-person and online acceptance.](https://blog.payjunction.com/payment-api) ## [![EMV Middleware Slows Processing Speeds](https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/emv-middleware-slows-processing-speeds.svg) EMV Middleware Slows Processing Speeds If you run a business taking credit card payments, you likely have a point-of-sale (POS) system that needs to be connected to a credit card reader. There are two types of software that your business might be using.](https://blog.payjunction.com/emv-middleware-slows-processing-speeds) ## [![Why Tokenization Is Better Than Point to Point Encryption](https://blog.payjunction.com/hubfs/BLOG/FEATURED%20IMAGES/point-to-point-encryption-cloud.svg) Why Tokenization Is Better Than Point to Point Encryption Whether you’re a developer seeking an integrated payment solution or a business owner searching for a credit card processing partner, the security of cardholder data should be at the top of your checklist. When processing and storing credit card data via a terminal, the payment processing security standard can vary.](https://blog.payjunction.com/point-to-point-encryption-cloud) ## Meet a Payment System You’ll Love - ###### FEATURES [No-code Payments Integration®](https://www.payjunction.com/payments/no-code-payments-integration.html) [ZeroTouch Terminal](https://www.payjunction.com/payments/smart-terminal.html) [Portable Terminal](https://www.payjunction.com/payments/portable-credit-card-reader-terminal.html) [Invoices](https://www.payjunction.com/payments/electronic-invoices.html) [ACH](https://www.payjunction.com/payments/ach-payments.html) [SmartSurcharge®](https://www.payjunction.com/payments/smart-surcharge.html) [Cards on File](https://www.payjunction.com/payments/store-credit-card-info.html) [Recurring Billing](https://www.payjunction.com/payments/recurring-payments.html) - [Ecommerce](https://www.payjunction.com/payments/ecommerce-merchant-services.html) [Customization](https://www.payjunction.com/payments/custom-payment-software.html) [Remote Signatures](https://www.payjunction.com/payments/signature-capture.html) [Rapid Refunds](https://www.payjunction.com/payments/credit-card-refund.html) [Multi-Location](https://www.payjunction.com/payments/enterprise-payments.html) [Sales Reports](https://www.payjunction.com/payments/sales-reports.html) [Search and Export](https://www.payjunction.com/payments/transaction-history-search.html) [Mobile App](https://itunes.apple.com/us/app/payjunction/id1324839420?ls=1&mt=8) - ###### BUSINESS SOLUTIONS [Auto Dealers](https://www2.payjunction.com/automotive-merchant-services) [Veterinary](https://www2.payjunction.com/payment-processing-veterinarians) [Dentistry](https://www2.payjunction.com/payment-processing-dentists) - ###### RESOURCES [Product Overview](https://www.payjunction.com/payments/payment-processing-solutions.html) [Integrations](https://integrations.payjunction.com/) [Blog](https://blog.payjunction.com/) [Guides](https://guides.payjunction.com/) [Support](https://support.payjunction.com/) [Service Status](https://status.payjunction.com/) [Tutorials](https://blog.payjunction.com/tag/pj-university/) [API](https://www.payjunction.com/payments/payment-api.html) - [Trust Center](https://trust.payjunction.com/) [Request a Demo](https://www2.payjunction.com/payjunction-demo) [Pricing](https://www.payjunction.com/payments/pricing.html) [About Us](https://www.payjunction.com/payments/about.html) [Careers *HIRING*](https://www2.payjunction.com/careers) [Press](https://media.payjunction.com/) - ###### RESOURCES [Integrations](https://integrations.payjunction.com/) [Guides](https://guides.payjunction.com/) [Tutorials](https://blog.payjunction.com/tag/pj-university/) [API](https://www.payjunction.com/payments/payment-api.html) [Request a Demo](https://www2.payjunction.com/payjunction-demo) [About Us](https://www.payjunction.com/payments/about.html) [Careers *HIRING*](https://www2.payjunction.com/careers) [Press](https://media.payjunction.com/) [Trust Center](https://trust.payjunction.com/) [Service Status](https://status.payjunction.com/) - ###### BUSINESS SOLUTIONS [Auto Dealers](https://www2.payjunction.com/automotive-merchant-services) [Veterinary](https://www2.payjunction.com/payment-processing-veterinarians) [Dentistry](https://www2.payjunction.com/payment-processing-dentists) ##### 800-601-0230 SIGN UP FOR OUR NEWSLETTER  Become a better advocate for your business. Get Email Updates GO Thank you for subscribing! PayJunction is a Level 1 PCI Compliant Provider. PayJunction is a registered ISO of PNC Bank, N.A., Pittsburgh, PA. © 2026 PayJunction. All rights reserved. [Privacy Policy](https://support.payjunction.com/hc/en-us/articles/211053648) and [Terms of Use](https://support.payjunction.com/hc/en-us/articles/211053628). ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Ursula Librizzi" }, "dateModified" : "2023-03-10", "datePublished" : "2017-06-20", "description" : "Knowing what is within PCI scope isn’t easy. Get familiar with the components that may put your business within scope.", "headline" : "What Defines PCI Scope?", "image" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/635739/BLOG/FEATURED%20IMAGES/pci-scope-defined.svg" }, "mainEntityOfPage" : "https://blog.payjunction.com/pci-scope-defined", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/635739/logo-400px.png" }, "name" : "PayJunction" } } ```