What is the PCI-DSS standard, as it relates to Dq Treat and its agreement with Acumera?

According to the 2025 Dq Treat Franchise Disclosure Document, PCI-DSS refers to the Payment Card Industry Data Security Standard. This standard is an information security standard designed for organizations that handle credit cards. The PCI-DSS is mandated by the card brands and administered by the Payment Card Industry Security Standards Council.

Acumera establishes firewall configurations and policies based on PCI-DSS recommendations, generally accepted industry best practices, and in consultation with Dq Treat. However, Acumera does not guarantee PCI compliance, nor does the implementation of their services alone ensure a Dq Treat franchisee's systems are secure from unauthorized access.

A Dq Treat franchisee is responsible for PCI compliance and for notifying the relevant parties of any suspected breach of their systems. Acumera is not responsible for any fines, penalties, or registration fees imposed by any payment card association or acquiring bank if a franchisee fails to be PCI compliant. As a service provider under PCI-DSS regulations, Acumera acknowledges its responsibility for the security of cardholder data it possesses, stores, processes, or transmits on behalf of the franchisee, or to the extent it impacts the security of the franchisee's cardholder data environment.