PCI DSS
A card-data security standard maintained by the PCI Security Standards Council for systems storing, processing or transmitting payment-card information. Version 4.0.1 appears in the official library; scope depends on architecture and flows.
PSD2
EU Directive 2015/2366 governs payment services and regulated providers. Strong authentication and detailed requirements depend on transaction type and parties involved.
Terminal integration
A POS and terminal must handle amounts, statuses, reversals, outages, errors, closing and reconciliation. Integration work does not make a provider a regulated payment institution or PCI assessor.
Questions to ask
Who is the acquirer? Who operates the terminal? Where does card data travel? Who controls secrets and access? How are paid-but-unconfirmed POS transactions identified?
At a glance
| Term | Nature | Scope |
|---|---|---|
| PCI DSS | Security standard | Cardholder data environment |
| PSD2 | EU directive | Regulated payment services |
| POS integration | Technical engagement | Interfaces and reconciliation |
How SFERE can support
SFERE: technical POS/ERP/payment integration and diagnostics; no funds handling or PCI certification.
Official laws, standards & publisher resources
This is an editorial explanation. Verify consolidated laws, applicable standards and interpretations for your activity, country and date. Full standards may require a licence.