# PCI DSS Level 1

Vrio maintains PCI DSS Level 1 compliance — the highest tier of certification for organizations that store, process, or transmit cardholder data.

## Our PCI DSS Program

Vrio's PCI DSS compliance program ensures every layer of our platform meets the rigorous requirements of the Payment Card Industry Data Security Standard.

### Network Security

- Firewall and network segmentation controls
- Quarterly vulnerability scans by an ASV
- Annual penetration testing

### Data Protection

- End-to-end encryption of cardholder data
- Tokenization to minimize data exposure
- Strict key management procedures

### Access & Monitoring

- Role-based access and least privilege
- Continuous monitoring and incident response
- Comprehensive audit logging

## Attestation of Compliance

Our AOC is issued annually following an on-site assessment by a Qualified Security Assessor (QSA). Download the current attestation below.

[Download AOC (PDF)](https://www.vrio.com/docs/vrio-aoc.pdf)