Payment Gateway
PCIComplianceHubLast updated
A service that passes transaction data from a merchant e-commerce site or point-of-sale system through to a payment processor. Gateways often provide hosted payment pages, iframes or tokenization, which can substantially reduce a merchant cardholder data environment and change which Self-Assessment Questionnaire applies. Using a gateway does not remove the obligation to comply; it changes the scope of what must be assessed.