---
title: PCI DSS
source: https://docs.newrelic.com/docs/security/security-privacy/compliance/certificates-standards-regulations/pci-dss
---

Payment Card Industry Data Security Standard (PCI DSS), maintained by Security Standards Council, is a set of security requirements to protect cardholder data environments (CDEs) where payment card data is stored, processed, or transmitted. PCI DSS provides a baseline of rigorous technical and operational requirements designed to protect CDEs.

Assessed against the PCI DSS version 4.0, New Relic maintains a Report on Compliance (ROC) and Attestation of Compliance (AOC) as a [Level 1 Service Provider](https://www.pcisecuritystandards.org/glossary/service-provider/).

New Relic removes some of your sensitive data in logs with automatic [log obfuscation](https://docs.newrelic.com/docs/logs/get-started/new-relics-log-management-security-privacy/#auto-obfuscation). Enabled by default for all customers.

## Applicable document by service [#applicable-services]

> #### ⚠️ CAUTION
>
> Not all [New Relic Observability Platform](https://docs.newrelic.com/docs/new-relic-one/use-new-relic-one/get-started/introduction-new-relic-one/) services are in compliance with this program. For non-compliant services, please see the section of [services not in scope](#not-scope).

The following applies to the New Relic Observability Platform:

| Document                  | Last updated | Infrastructure   | Services                         |
| ------------------------- | ------------ | ---------------- | -------------------------------- |
| Attestation of Compliance | 2024-NOV-13  | AWS, First Party | New Relic Observability Platform |

> #### ⚠️ IMPORTANT
>
> If you require a copy of New Relic’s AOC or PCI Customer Responsibility Matrix, reach out to your New Relic account representative.

## Services not in scope [#not-scope]

The following services are not PCI DSS authorized:

| Last updated | Infrastructure | Services                         |
| ------------ | -------------- | -------------------------------- |
| N/A          | GCP            | Pixie: Community Cloud for Pixie |
| N/A          | GCP            | Pixie: Auto-telemetry with Pixie |