What is PCI compliance and do I need it?

PCI DSS is a security standard for businesses that handle card data. All merchants accepting card payments must comply. If you use a hosted checkout (Stripe Checkout, Square), most requirements are handled for you — you just fill out a Self-Assessment Questionnaire annually. Non-compliance can result in monthly fines of $5-100K from your processor.