PCI DSS is a standard that has to be implemented by all entities that process card data. This is a requirement for both APEXX and the merchants.

The standard depends on the level of involvement in the processing of card data. To find out more about it check the official website of the Security Standards Council.