--- title: "Ecommerce PCI DSS Compliance Myths Explained: Guest Blog by Daniel Humphries" description: PCI DSS (Payment Card Industry Data Security Standard) standards apply to any business that accepts credit cards, including e-commerce merchants- however many retailers are confused about how these regulations affect them. Miva Merchant president, Rick Wilson, recently spoke with Daniel Humphries, researcher for a firm that reviews IT Security software, to help define six popular e-commerce PCI DSS compliance myths. image: https://blog.miva.com/hubfs/Blog%20-%20Default%20Featured%20Images/General_Photo_Blog%20%E2%80%93%2019@2x.jpg --- - [![Miva, Inc logo.](https://www.miva.com/images/logos/miva-type-white.svg)](https://www.miva.com) - ![White X close button](https://www.miva.com/images/svg/icons/icon-x-white.svg) - Why Choose Miva - Solutions - [Why Miva Simplify Complexity](https://www.miva.com/why-miva) - [Platform Overview A Complete Ecommerce Solution](https://www.miva.com/platform-overview) - [Miva Connect Real-time Native Connections](https://www.miva.com/miva-connect) - [Vexture AI-powered Product Discovery](https://www.miva.com/vexture) - [PageBuilder No-code Page Creation](https://www.miva.com/pagebuilder) - [MivaPay Flexible Native Payment Solution](https://www.miva.com/mivapay) - Business Type - [B2B Robust Business Tools Built-In](https://www.miva.com/b2b-ecommerce) - [B2C Designed for Agility](https://www.miva.com/b2c-ecommerce-platform) - [Hybrid B2B + B2C, All Managed Together](https://www.miva.com/b2b-dtc-ecommerce-platform) - [Enterprise](https://www.miva.com/enterprise-ecommerce-platform) - Resources - Community - [Customer Stories Case Studies and Featured Stores Built With Miva](https://www.miva.com/customer-stories) - [Technology Partners An Ecosystem Built for Flexibility](https://www.miva.com/partners) - [Agency Partners Helping You Build and Grow](https://www.miva.com/miva-agency-partners) - Resources - [Resource Center Browse Our Extensive Library](https://www.miva.com/ecommerce-strategy-resource-guides) - [Blog Explore Miva Insights on Ecommerce](https://blog.miva.com/) - [Documentation Answers for All Your Miva Questions](https://docs.miva.com/) - [Get Pricing](https://www.miva.com/schedule-demo-admin) [![Miva, Inc logo.](https://www.miva.com/images/logos/miva-type-white.svg)](https://www.miva.com) - Why Choose Miva - Solutions - [Why Miva Simplify Complexity](https://www.miva.com/why-miva) - [Platform Overview A Complete Ecommerce Solution](https://www.miva.com/platform-overview) - [Miva Connect Real-time Native Connections](https://www.miva.com/miva-connect) - [Vexture AI-powered Product Discovery](https://www.miva.com/vexture) - [PageBuilder No-code Page Creation](https://www.miva.com/pagebuilder) - [MivaPay Flexible Native Payment Solution](https://www.miva.com/mivapay) - Business Type - [B2B Robust Business Tools Built-In](https://www.miva.com/b2b-ecommerce) - [B2C Designed for Agility](https://www.miva.com/b2c-ecommerce-platform) - [Hybrid B2B + B2C, All Managed Together](https://www.miva.com/b2b-dtc-ecommerce-platform) [![](https://www.miva.com/images/webp/apex-stat.webp)](https://www.miva.com/case-studies/apex-tools) Your Partner for Growth See how Apex Tool drove a 57% revenue lift with Miva's Vexture® solution. - [Enterprise](https://www.miva.com/enterprise-ecommerce-platform) - Resources - Community - [Customer Stories Case Studies and Featured Stores Built With Miva](https://www.miva.com/customer-stories) - [Technology Partners An Ecosystem Built for Flexibility](https://www.miva.com/partners) - [Agency Partners Helping You Build and Grow](https://www.miva.com/miva-agency-partners) - Resources - [Resource Center Browse Our Extensive Library](https://www.miva.com/ecommerce-strategy-resource-guides) - [Blog Explore Miva Insights on Ecommerce](https://blog.miva.com/) - [Documentation Answers for All Your Miva Questions](https://docs.miva.com/) - [Get Pricing](https://www.miva.com/schedule-demo-admin) - ![White, three-lined, menu icon.](https://www.miva.com/images/svg/icons/icon-menu.svg) # Ecommerce PCI DSS Compliance Myths Explained: Guest Blog by Daniel Humphries By Guest Contributor | September 9, 2014 - [Ecommerce Selling](https://blog.miva.com/tag/ecommerce-selling) ![Smartphone displaying products](https://blog.miva.com/hubfs/Blog%20-%20Default%20Featured%20Images/General_Photo_Blog%20%E2%80%93%2019@2x.jpg) ### Before You Read On... See why top ecommerce brands use Miva’s no-code platform to run multiple stores, manage massive catalogs, and grow their revenue. [Book a Demo of Miva](https://www.miva.com/schedule-demo-admin) PCI DSS (Payment Card Industry Data Security Standard) standards apply to any business that accepts credit cards, including ecommerce merchants- however many retailers are confused about how these regulations affect them. Miva Merchant president, Rick Wilson, recently spoke with Daniel Humphries, researcher for a firm that reviews IT Security software, to help define six popular e-commerce [PCI DSS](https://blog.miva.com/site-security-and-fraud-prevention-during-ecommerce-ups-and-downs/) compliance myths. Daniel told us, “PCI DSS can be a bit of a nightmare for retailers, especially SMBs who don’t have dedicated staff to deal with security and compliance matters. Some people leap right in there, building their own platforms with little understanding of what they’re getting themselves into. Other people choose to outsource a lot of the heavy lifting, but even then they still have responsibilities they have to be aware of when the PCI auditor comes a-calling. To cut a long story short: just because your storefront is made of pixels and not brick-and-mortar this doesn’t mean the PCI council is any less interested in how you secure your customers’ sensitive data.” Rick offered this advice to those small and midsized e-commerce merchants who may be thinking of building  their own platforms, outlining a few of the basics they often overlook. For example: **Cheap hosting is not worth the cost-savings.** “Most hosting providers are not configured to do PCI-compliant hosting. Your average commodity hosting provider \[that’s\] charging $7 a month for Web hosting … well, it’s OK to put your blog there, but you should not host an e-commerce site on hosting like that. Realistically, you should be paying at least $59 a month or much, much more for anything … PCI-compliant.” **Shared servers bring a lot of potential problems.** “Shared servers are not expressly forbidden by PCI, but do not ever have your database on the same server as your website—that’s rule number one\[, as it is much easier to hack and gain access to sensitive data\]. There’s no chance you’re PCI-compliant … don’t do it.” **Craigslist is not a good place to find a Web designer.** “If you go to Craigslist or hire a local agency to build you a \[website\] … that developer is going to build the site on his computer and then come show it to you, and when it’s done, you’ll launch it. It’s usually easier to do that, from a developer’s perspective, with some open-source software that he can install on a local computer. However, with open-source software, while it is possible to build something PCI-compliant, it is a lot more challenging than most people realize.” PCI compliance incurs serious ongoing costs. “At Miva Merchant, we spend six figures every couple of years to make sure we stay validated.” For more on the ‘6 Popular E-Commerce PCI DSS Compliance Myths Explained’, see the full article [here.](https://intelligent-defense.softwareadvice.com/e-commerce-pci-compliance-myths-explained-0814/) [Back to top](https://blog.miva.com/e-commerce-pci-dss-compliance-myths-explained-guest-blog-by-daniel-humphrie#postAnchor) ### Want to read this blog offline? No worries, download the PDF version now and enjoy your reading later... Download PDF ![Image of Guest Contributor.](https://blog.miva.com/hubfs/Miva%2010/Miva%2010%20Email%20images/miva-logo-square.png) Guest Contributor The Miva ecommerce platform powers some of the web’s most spectacular online stores—stores that benefit every day from our relationships with our partners and other valued providers. We work with our network of experts to create fresh, insightful content for all independent merchants. Interested in contributing to the Miva blog? Click below to learn more about our co-marketing opportunities. [Visit Website](https://www.miva.com/co-marketing-with-miva) ![White Miva, Inc logo.](https://www.miva.com/images/logos/miva-type-white.svg) Powering the Next Era of Intelligent, Connected Commerce. [Get Pricing](https://www.miva.com/schedule-demo-admin) - [![White Facebook logo.](https://www.miva.com/images/svg/icons/icon-white-facebook.svg)](https://www.miva.com/social/facebook) - [![White X logo.](https://www.miva.com/images/svg/icons/icon-white-x.svg)](https://www.miva.com/social/x) - [![White LinkedIn logo.](https://www.miva.com/images/svg/icons/icon-white-linkedin.svg)](https://www.miva.com/social/linkedin) - [![White Instagram logo.](https://www.miva.com/images/svg/icons/icon-white-instagram.svg)](https://www.miva.com/social/instagram) ![Badge displaying that Miva was named Best Ecommerce Platform in 2020 by Vendors In Partnership.](https://www.miva.com/images/badges/best-ecomm-platform-2020.webp) - Solutions - [Why Miva](https://www.miva.com/why-miva) - [Platform Overview](https://www.miva.com/platform-overview) - [Miva Connect](https://www.miva.com/miva-connect) - [Vexture](https://www.miva.com/vexture) - [PageBuilder](https://www.miva.com/pagebuilder) - [MivaPay](https://www.miva.com/mivapay) - [MultiStorefront](https://www.miva.com/miva-multistorefront) - Business Type - [B2B](https://www.miva.com/b2b-ecommerce) - [B2C](https://www.miva.com/b2c-ecommerce-platform) - [Hybrid](https://www.miva.com/b2b-dtc-ecommerce-platform) - Community - [Customer Stories](https://www.miva.com/customer-stories) - [Technology Partners](https://www.miva.com/partners) - [Agency Partners](https://www.miva.com/miva-agency-partners) - [Forums](https://www.miva.com/forums/) - Resources - [Resource Center](https://www.miva.com/ecommerce-strategy-resource-guides) - [Blog](https://blog.miva.com/) - [Documentation](https://docs.miva.com/) - [App Store](https://apps.miva.com/) - [Miva Releases](https://www.miva.com/product-releases) - Compare Miva - [With Shopify](https://www.miva.com/miva-vs-shopify-plus) - [With BigCommerce](https://www.miva.com/miva-vs-bigcommerce) - [With Adobe Commerce (Magento)](https://www.miva.com/miva-vs-adobe-commerce-magento) - [With Salesforce Commerce](https://www.miva.com/miva-vs-salesforce-commerce) - Company - [About](https://www.miva.com/company) - [Leadership](https://www.miva.com/company/leadership) - [Diversity & Inclusion](https://www.miva.com/company/diversity-inclusion) - [Careers](https://www.miva.com/company/careers) - [Press Center](https://www.miva.com/press/) Copyright © 1997 – 2026 Miva®, Miva Merchant®, MivaPay®, Camp Miva®, Miva Connect®, Vexture®, Miva, Inc. All Rights Reserved. Terms & Policies - [Privacy Policy](https://www.miva.com/privacy) - [Cookie Policy](https://www.miva.com/cookie-policy) - [Job Applicants Privacy](https://www.miva.com/miva-applicant-privacy-notice) - [Intellectual Property](https://www.miva.com/intellectualproperty) - [Terms of Service](https://www.miva.com/pdf/SaaS_TOS.pdf) - [Non-Compliance Policy](https://www.miva.com/miva-software-updates) ```json { "@context" : "https://schema.org", "@id" : "https://blog.miva.com/e-commerce-pci-dss-compliance-myths-explained-guest-blog-by-daniel-humphrie#webpage", "@type" : "WebPage", "description" : "PCI DSS (Payment Card Industry Data Security Standard) standards apply to any business that accepts credit cards, including e-commerce merchants- however many retailers are confused about how these regulations affect them. Miva Merchant president, Rick Wilson, recently spoke with Daniel Humphries, researcher for a firm that reviews IT Security software, to help define six popular e-commerce PCI DSS compliance myths.", "inLanguage" : "en-US", "isPartOf" : { "@id" : "https://blog.miva.com/#website" }, "name" : "Ecommerce PCI DSS Compliance Myths Explained: Guest Blog by Daniel Humphries", "url" : "https://blog.miva.com/e-commerce-pci-dss-compliance-myths-explained-guest-blog-by-daniel-humphrie" } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://www.miva.com/", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://blog.miva.com/", "name" : "Blog", "position" : 2 }, { "@type" : "ListItem", "item" : "https://blog.miva.com/e-commerce-pci-dss-compliance-myths-explained-guest-blog-by-daniel-humphrie", "name" : "Ecommerce PCI DSS Compliance Myths Explained: Guest Blog by Daniel Humphries", "position" : 3 } ] } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Guest Contributor", "url" : "https://blog.miva.com/author/guest-contributor" }, "dateModified" : "1629834773193", "datePublished" : "2014-09-09 00:00:00", "description" : "PCI DSS (Payment Card Industry Data Security Standard) standards apply to any business that accepts credit cards, including e-commerce merchants- however many retailers are confused about how these regulations affect them. Miva Merchant president, Rick Wilson, recently spoke with Daniel Humphries, researcher for a firm that reviews IT Security software, to help define six popular e-commerce PCI DSS compliance myths.", "headline" : "Ecommerce PCI DSS Compliance Myths Explained: Guest Blog by Daniel Humphries", "image" : { "@type" : "ImageObject", "height" : 630, "url" : "https://go.miva.com/hubfs/Blog%20-%20Default%20Featured%20Images/General_Photo_Blog%20%E2%80%93%2019@2x.jpg", "width" : 1200 }, "mainEntityOfPage" : { "@id" : "https://blog.miva.com/e-commerce-pci-dss-compliance-myths-explained-guest-blog-by-daniel-humphrie#webpage", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "height" : 60, "url" : "https://www.miva.com/images/new-images/mivainc-logo.png", "width" : 300 }, "name" : "Miva", "url" : "https://www.miva.com/" }, "url" : "https://blog.miva.com/e-commerce-pci-dss-compliance-myths-explained-guest-blog-by-daniel-humphrie" } ```