Many companies are not sure whether they are required to comply with PCI DSS.
Quick test
- you accept card payments
- you have a website or payment system
- you process customer data
How to know for sure
If at least one of these points applies, you need PCI DSS or at least an initial audit.
Important
Even if a provider processes the data, part of the responsibility still remains on your side.