According to the Payment Card Industry Security Standards Council (PCI SSC), a Service Provider is any:Business entity that is not a payment brand, directly involved in the processing, storage, or transmission of cardholder data. This also includes companies that provide services that control or could impact the security of cardholder data. (Source:www.pcisecuritystandards.org)
Since we are deploying the C3 Secure Protal, we set the wheels in motion four years ago to achieve this. After a grueling 8 month audit by our Qualified Security Assessors, CompliancePoint, we have been approved.