[Glossary](https://telxpress.com/glossary/) / Security & compliance # PCI DSS **PCI DSS** (Payment Card Industry Data Security Standard) is the set of security requirements every business that stores, processes or transmits payment card data must meet, including card payments taken over the phone. - Security & compliance - Updated October 11, 2026 - Written by the Telxpress advisory team 01 In depth ## What it is, why it matters and *what to ask a vendor* PCI DSS is maintained by the PCI Security Standards Council and enforced through the card brands and your payment processor. It covers networks, systems, access, logging and policy. Phone payments are a special case: a card number spoken on a recorded line puts the recording, the transcript and the agent inside the scope of the standard. Growing businesses meet this when they add call recording, an AI voice agent or a cloud phone system without thinking about the finance desk. The Council's guidance on telephone-based payments describes approaches such as pausing recording during card entry or letting callers key the number so staff and recordings never hear it. Ask a vendor whether recording can be paused or masked during payment, whether the AI agent refuses to accept card numbers or hands the caller to a compliant payment flow, how any card data is encrypted, and which parts of PCI scope their service takes on. Agree the answers in writing with your processor and advisor. 02 Related terms ## Terms that usually come up *alongside it* - Security & compliance ### [Call recording consent](https://telxpress.com/glossary/call-recording-consent/) Call recording consent is the permission the law requires before a phone call is recorded; in California, every party to a confidential call must be told and agree, which is often called two-party consent. - Voice ### [IVR (interactive voice response)](https://telxpress.com/glossary/ivr/) An IVR, or interactive voice response system, is an automated phone system that interacts with callers through voice prompts and keypad or spoken input to answer questions, collect information or route the call. - Network ### [Firewall](https://telxpress.com/glossary/firewall/) A firewall is the security device or service that inspects traffic entering, leaving and crossing your network and allows or blocks it by rule, protecting your systems from the internet and from each other. - Security & compliance ### [MFA (multi-factor authentication)](https://telxpress.com/glossary/mfa/) Multi-factor authentication (MFA) requires a second proof of identity beyond a password, such as a code from an app or a hardware key, and it defeats most attacks that rely on stolen passwords. 03 At Telxpress ## Where this shows up *at Telxpress* The pages and articles where this term does real work: what we advise, build and support. - Industry ### [AI & Business Technology for Nonprofits](https://telxpress.com/industries/nonprofit/) AI use cases that help small nonprofit teams answer, follow up and coordinate, with donor privacy and PCI in mind, plus the systems we install. - Page ### [Business VoIP & Cloud Phone Systems in Irvine](https://telxpress.com/solutions/business-technology/phone-systems/) VoIP, cloud phone systems, UCaaS and SIP trunks from Yealink, Nextiva, Avaya, Yeastar and Polycom, installed, supported and ready for AI call handling. - Page ### [Donya AI Voice Agent: Never Miss a Call](https://telxpress.com/solutions/ai/voice-agent/) Donya answers every call 24/7, qualifies leads and books appointments. Call the demo line to hear it. Built and run by Telxpress. 04 Sources ## Public *references* The standard or law this definition rests on, as published by its owner. Fetched and checked on the review date above. - [PCI Security Standards Council: PCI DSS](https://www.pcisecuritystandards.org/standards/pci-dss/) pcisecuritystandards.org - [PCI SSC Information Supplement: Protecting Telephone-Based Payment Card Data (PDF)](https://listings.pcisecuritystandards.org/documents/Protecting%5FTelephone%5FBased%5FPayment%5FCard%5FData%5Fv3-0%5Fnov%5F2018.pdf) listings.pcisecuritystandards.org Next step ## Want This Applied *to Your Business?* Book a free 30-minute AI readiness consultation. You'll leave with three AI opportunities specific to your business, whether you work with us or not. [Book My Free Consultation](https://telxpress.com/book/) [Take the Free AI Readiness Assessment](https://telxpress.com/ai-readiness/) [Or call 24/7: (949) 861-4500](tel:+19498614500) Last reviewed: October 11, 2026. Published by Telxpress, Irvine, CA.