PCI-DSS (AI Agents)

PCI-DSS is the payment card industry security standard that applies when AI agents process, store, or transmit cardholder data. Agents operating in payment environments must be scoped to minimise cardholder data exposure, and their access to payment systems must be controlled and audited in line with PCI-DSS requirements.