PCI DSS Compliance Audits
PCI DSS assessments for companies in the Netherlands
1 Sequence Cyber Ltd is a PCI SSC-listed Qualified Security Assessor (QSA) company for Europe. Our QSAs, Ron Williams and Venkata Kamala Bandepalli, carry out PCI DSS v4.0.1 assessments for merchants and payment service providers in the Netherlands, including ROC, AOC and SAQ support. Assessments are delivered in English. Scoping calls are free.PCI SSC-listed QSA company for Europe (verify on the PCI SSC QSA list) · ISO 27001 and ISO 9001 certified · Quarterly ASV scans through Qualys, a PCI SSC Approved Scanning Vendor
What is different in the Netherlands
- The Netherlands has no domestic card scheme of its own: the old national PIN scheme was retired in 2012, and Dutch debit cards now run on Mastercard or Visa. Card flows are therefore in PCI DSS scope from end to end.
- iDEAL, the most used online payment method, moves money between bank accounts, not cards, so it sits outside PCI DSS. Merchants that offer both need a clear scope boundary.
- De Nederlandsche Bank (DNB) supervises payment and e-money institutions. DORA has applied to them since 17 January 2025.
- The Cyberbeveiligingswet (Cbw), the Dutch NIS2 law, has been in force since 15 August 2026 and brings many more organisations under national cyber-security rules.
- The Autoriteit Persoonsgegevens (AP) enforces GDPR in the Netherlands.
How to choose a PCI DSS QSA in the Netherlands
- Check the PCI SSC QSA list for the Europe region.
- Ask how card flows will be separated from iDEAL and other account-to-account payments.
- Ask whether Dutch-language evidence can be reviewed, and whether your acquirer accepts an English ROC.
- If you are supervised by DNB, ask how PCI DSS evidence will be reused for DORA and the Cbw.
Frequently asked questions
Is iDEAL in PCI DSS scope?
No. iDEAL is a bank-to-bank payment, not a card payment. Shared systems that also handle card data are in scope.
Do you work in Dutch?
Our assessments are delivered in English. Tell us at scoping if your evidence is mainly in Dutch.