Sign in Get started

Information Security

Available now

PCI DSS · 4.0.1

PCI DSS 4.0.1 is the security standard for any organization that stores, processes, or transmits payment card data. Its requirements are prescriptive and non-negotiable if you touch cardholder data.

63

requirements tracked · part of the standard

Premium

Access

Add-on from $49/mo

Start free with PCI DSS See pricing

Scope

How much of the standard Keel models

Models part of the standard

Keel models part of this standard, not all of it. A readiness score here is a percentage of the scope described below, not of the whole published standard — so read it that way, and tell your assessor the same.

What is not modelled: Modelled at requirement/sub-requirement summary depth, not the full defined-requirement list.

Authored in Keel
63 requirements
Defined by the standard
Not verified against the published standard yet, so Keel states no number

Keel publishes this for every framework it ships, complete or not, so a readiness percentage can be read against a denominator you can see. Compare every framework

Who it is for

Who needs PCI DSS?

  • Merchants and processors handling credit-card payments
  • SaaS platforms that route or store cardholder data
  • Teams scoping down with tokenization or a hosted payment page

What Keel does

How Keel helps with PCI DSS

  • The PCI DSS 4.0.1 requirements as a trackable control set
  • Evidence shared with your SOC 2 / ISO program so you are not duplicating work
  • Clear visibility into which requirements are met, in progress, or a gap

Collect once, comply everywhere

PCI DSS shares canonical controls with ISO/IEC 27001, NIST SP 800-53 and SOC 2 and others in the catalog. Implement one of those controls and it counts toward every framework it satisfies, so adding PCI DSS rarely means starting from scratch.

Shares canonical controls with

  • ISO/IEC 27001
  • CIS Critical Security Controls
  • SOC 2
  • SOX (Sarbanes-Oxley) Section 404
  • NIST Cybersecurity Framework
  • NIST SP 800-53
  • NIST SP 800-171
  • HIPAA
  • GDPR
  • COPPA
  • Google Play Families
  • Amazon Appstore Child-Directed Apps
  • Apple App Store Kids Category
  • ISO 9001
  • AI Governance Essentials
  • ISO/IEC 42001
  • NIST AI Risk Management Framework
  • EU AI Act
  • ESG Essentials
  • US Employment Law - Federal Baseline

Features that help with PCI DSS: Controls & crosswalk · Evidence management · AI Insights

Other frameworks: ISO/IEC 27001 · CIS Critical Security Controls · SOC 2 · SOX (Sarbanes-Oxley) Section 404 · NIST Cybersecurity Framework · NIST SP 800-53 · All frameworks