Understand the request
Were you asked for a PCI DSS certificate?
Certificate is often used informally to request evidence. The requesting party may actually expect an SAQ, AOC, ASV report or another validation. Entavira’s completion acknowledgment is not an official PCI SSC certificate.
PCI DSS in Mexico: a requirement that arrives through the payment ecosystem
The November 27, 2018 Official Gazette resolution refers to payment-card industry security certifications, including PCI DSS, in Article 316 Bis 10(V), for certain electronic-banking services of credit institutions.
The provision is directed at credit institutions and does not, by itself, create a direct general legal obligation for every Mexican merchant. Merchant requirements commonly arrive through an acquirer, aggregator, processor, gateway, contract, payment brand or requesting party.
Official Gazette resolution dated November 27, 2018, Article 316 Bis 10(V).This content is informational and is not legal advice. Applicability and validation depend on the operation and requesting party.