PA-DSS (Payment Application Data Security Standard) is the Payment Application Data Security Standard set by the PCI SSC.
The Payment Application Data Security Standard (PA-DSS) is a global security standard created by the Payment Card Industry Security Standards Council (PCI SSC). PA-DSS was implemented to provide a definitive data standard for software vendors that develop payment applications. The standard aims to prevent payment applications developed for third parties from storing prohibited sensitive data, including the magnetic stripe, CVV2, or PIN.. In this process, the standard also specifies that software vendors must develop payment applications compliant with the Payment Card Industry Data Security Standard (PCI DSS).
Ultimately, PA-DSS and its validation program will be incorporated into the PCI Software Security Framework. PA-DSS was planned to be retired by the end of 2022, once the expiration dates were reached for payment applications validated under PA-DSS v3.2.
The Payment Application Data Security Standard (PA-DSS) is a set of requirements designed to help software vendors develop secure payment applications that support PCI DSS compliance. PA-DSS applies to third-party applications that store, process, or transmit cardholder data as part of an authorization or settlement. Software applications developed by vendors solely for in-house use are exempt from PA-DSS, but must still comply with PCI DSS.
The Payment Card Industry Security Standards Council maintains PA-DSS, which it published in 2008 to replace Visa's Payment Application Best Practices (PABP). PABP was Visa's initiative to guide software vendors in building secure applications. However, it was not widely adopted.
