Payment Application Data Security Standard
E193742
The Payment Application Data Security Standard (PA-DSS) is a set of security requirements designed to help software vendors develop payment applications that securely handle cardholder data and support PCI DSS compliance.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Payment Application Data Security Standard canonical | 4 |
How this entity was disambiguated
This entity first appeared as the object of triple T1711640 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Payment Application Data Security Standard Context triple: [PCI Security Standards Council, developsStandard, Payment Application Data Security Standard]
-
A.
PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) is a global set of security requirements designed to protect cardholder data and reduce credit card fraud for organizations that handle payment card information.
-
B.
Payment Integrity Information Act
The Payment Integrity Information Act is a U.S. federal law aimed at reducing improper payments and enhancing oversight by requiring agencies to use tools like the Do Not Pay system to verify eligibility before disbursing funds.
-
C.
SAFE Framework of Standards
The SAFE Framework of Standards is a global customs security and trade facilitation framework that sets guidelines for securing and streamlining international supply chains.
-
D.
Data Guard
Data Guard is Oracle's high-availability and disaster recovery solution that maintains synchronized standby databases to protect against data loss and downtime.
-
E.
PCI Security Standards Council
The PCI Security Standards Council is a global forum that develops and manages security standards for payment card data protection, including the PCI Data Security Standard (PCI DSS).
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Payment Application Data Security Standard Target entity description: The Payment Application Data Security Standard (PA-DSS) is a set of security requirements designed to help software vendors develop payment applications that securely handle cardholder data and support PCI DSS compliance.
-
A.
PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) is a global set of security requirements designed to protect cardholder data and reduce credit card fraud for organizations that handle payment card information.
-
B.
Payment Integrity Information Act
The Payment Integrity Information Act is a U.S. federal law aimed at reducing improper payments and enhancing oversight by requiring agencies to use tools like the Do Not Pay system to verify eligibility before disbursing funds.
-
C.
SAFE Framework of Standards
The SAFE Framework of Standards is a global customs security and trade facilitation framework that sets guidelines for securing and streamlining international supply chains.
-
D.
Data Guard
Data Guard is Oracle's high-availability and disaster recovery solution that maintains synchronized standby databases to protect against data loss and downtime.
-
E.
PCI Security Standards Council
The PCI Security Standards Council is a global forum that develops and manages security standards for payment card data protection, including the PCI Data Security Standard (PCI DSS).
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
payment card industry standard
ⓘ
security standard ⓘ |
| abbreviation | PA-DSS ⓘ |
| appliesTo |
payment applications that store, process, or transmit cardholder data
ⓘ
third-party payment application vendors ⓘ |
| developedBy | PCI Security Standards Council ⓘ |
| domain |
cardholder data security
ⓘ
payment applications ⓘ |
| endOfLifeDate | 2022-10-28 ⓘ |
| excludes |
hardware-only payment terminals
ⓘ
in-house developed payment applications not sold to third parties ⓘ |
| focusesOn |
logging and auditing of payment application activity
ⓘ
minimizing storage of sensitive authentication data ⓘ secure authentication and access control in payment applications ⓘ secure handling of cardholder data ⓘ secure remote access to payment applications ⓘ vulnerability management for payment applications ⓘ |
| fullName | Payment Application Data Security Standard self-link ⓘ |
| geographicalScope | international ⓘ |
| industry | payment card industry ⓘ |
| publisher | PCI Security Standards Council ⓘ |
| purpose |
to ensure payment applications support PCI DSS compliance
ⓘ
to help software vendors develop secure payment applications ⓘ to reduce the risk of cardholder data compromise in payment applications ⓘ |
| relatedTo |
PCI DSS
ⓘ
surface form:
PCI Data Security Standard
|
| requires |
encryption of cardholder data over open networks
ⓘ
implementation of strong access control measures in payment applications ⓘ logging of security-relevant events in payment applications ⓘ protection of stored cardholder data ⓘ secure development practices for payment applications ⓘ testing of payment applications for security vulnerabilities ⓘ |
| requiresValidationBy |
PCI Security Standards Council
ⓘ
surface form:
PCI Security Standards Council Qualified Security Assessor
|
| retirementAnnouncedBy | PCI Security Standards Council ⓘ |
| retirementAnnouncementYear | 2019 ⓘ |
| status | superseded ⓘ |
| supersededBy |
PCI Secure Software Lifecycle Standard
ⓘ
PCI Secure Software Standard ⓘ PCI Software Security Framework ⓘ |
| supports | PCI DSS compliance for merchants and service providers ⓘ |
| targets | software-based payment applications ⓘ |
| validationResult | listing on PCI SSC List of Validated Payment Applications ⓘ |
| version |
PA-DSS v1.0
ⓘ
PA-DSS ⓘ
surface form:
PA-DSS v1.1
PA-DSS ⓘ
surface form:
PA-DSS v1.2
PA-DSS ⓘ
surface form:
PA-DSS v2.0
PA-DSS v3.0 ⓘ PA-DSS ⓘ
surface form:
PA-DSS v3.1
PA-DSS ⓘ
surface form:
PA-DSS v3.2
|
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Payment Application Data Security Standard Description of subject: The Payment Application Data Security Standard (PA-DSS) is a set of security requirements designed to help software vendors develop payment applications that securely handle cardholder data and support PCI DSS compliance.
Referenced by (4)
Full triples — surface form annotated when it differs from this entity's canonical label.
Payment Application Data Security Standard
→
fullName
→
Payment Application Data Security Standard
self-link
ⓘ