How often must Del Taco franchisees submit PCI compliance reports, and to whom?
Del_Taco Franchise · 2025 FDDAnswer from 2025 FDD Document
You must implement and maintain an approved Payment Card Industry (PCI) compliance program for the Restaurant that complies with the specifications set forth in the Manuals. You must engage the services of PCI compliance vendors to provide the services that we designate. We have the right, but are not obligated, to engage a vendor to provide some or all of the PCI compliance services for your benefit at your expense. We have engaged NuArx to provide PCI compliance services to Del Taco System Restaurants. You must submit PCI compliance reports to us or our designee in the manner and frequency we set in the Manuals.
Source: Item 8 — RESTRICTIONS ON SOURCES OF PRODUCTS AND SERVICES (FDD pages 28–30)
What This Means (2025 FDD)
According to Del Taco's 2025 Franchise Disclosure Document, franchisees are required to implement and maintain an approved Payment Card Industry (PCI) compliance program for their restaurants, adhering to the specifications outlined in the manuals. Del Taco franchisees must engage PCI compliance vendors for designated services, and while Del Taco has the option to engage a vendor for these services on the franchisee's behalf at the franchisee's expense, they have engaged NuArx to provide PCI compliance services to Del Taco System Restaurants.
The FDD states that franchisees must submit PCI compliance reports to Del Taco or their designee. The frequency and manner of these submissions are determined by Del Taco and detailed in the manuals.
For a prospective franchisee, this means that maintaining PCI compliance is a mandatory aspect of operating a Del Taco franchise. The franchisee will likely incur costs associated with engaging PCI compliance vendors, and they must adhere to the reporting schedule and methods dictated by Del Taco. It is important for potential franchisees to review the Del Taco manuals to understand the specific requirements for PCI compliance reporting.