Regulatory Mapping · PCI DSS v4.0

PCI DSS Compliance Mapping

Payment Card Industry Data Security Standard v4.0. Live evidence mapping for AI systems operating in cardholder data environments.

PCI DSS scope: Applies to all entities that store, process, or transmit cardholder data. AI systems integrated into payment flows, fraud detection, or customer service for financial transactions must demonstrate continuous monitoring (Req.10), access controls (Req.8), and cryptographic integrity (Req.4). TrustLayers provides the continuous audit logs required under Requirement 10 and the evidence chain required for QSA assessments.
Req.1-2 — Network Security
Install and maintain network security controls for AI cardholder data environments
Req.3 — Protect Stored Data
Protect stored account data — AI systems must not retain sensitive authentication data
Req.4 — Encryption in Transit
Protect cardholder data with strong cryptography during transmission
Req.6 — Secure Systems
Develop and maintain secure systems and software — includes AI models
Req.8 — Access Control
Identify users and authenticate access to system components
Req.10 — Logging & Monitoring
Log and monitor all access to system components and cardholder data
Req.11 — Security Testing
Test security of systems and networks regularly
Req.12 — Security Policy
Support information security with organisational policies and programs
Agent Category Events Error rate Violations Sensitive Drift Encrypted Overrides PCI Criteria Assessment
TransparencyAgent
-ransparency-gent-297b…
 Governance 938 0% 0 0 0 2% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
ClaraAI-Assistant
-lara-ssistant-a8ad…
 Support 197 0% 0 0 0 1% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
RiskClassifier
-isk-lassifier-1f87…
 Governance 74 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
HumanOversightAgent
-uman-versight-gent-01…
 Governance 58 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
ComplianceAlignment
-ompliance-lignment-08…
 Governance 30 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
PolicyFramework
-olicy-ramework-408a…
 Governance 9 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
AuditabilityAgent
-uditability-gent-aa78…
 Governance 7 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
ClaraAI-Voice
-lara-oice-7b52…
 Support 6 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
ClaraAI-Emergency
-lara-mergency-326e…
 Support 4 0% 0 4 0 0% 0
✓
✓
✗
✓
✓
✓
✗
5/7
 PARTIAL
ClaraAI-Tracking
-lara-racking-c8c2…
 Support 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Clara
-lara-89e1…
 Support 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
PolicyFramework
gov-policy-001…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
AccountabilityAgent
gov-accountability-002…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
RiskClassifier
gov-riskclass-003…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
HumanOversightAgent
gov-humanoversight-004…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
DataGovernanceAgent
gov-datagovernance-005…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
TransparencyAgent
gov-transparency-006…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
BiasMonitor
gov-bias-007…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
SecurityAgent
gov-security-008…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
AuditabilityAgent
gov-audit-009…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
ExplainabilityAgent
gov-explainability-010…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
ComplianceAlignment
gov-compliance-011…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
DriftDetector
gov-drift-012…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
IncidentResponse
gov-incident-013…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
AccessControl
gov-access-014…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
TrustMetrics
gov-trust-015…
 Governance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
HR Screening Agent
hr-screening-001…
 HR 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Credit Scoring Agent
credit-scoring-002…
 Finance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Medical Triage Agent
medical-triage-003…
 Health 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Student Assessment Agent
student-assess-004…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Legal Research Agent
legal-research-005…
 Legal 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Contract Review Agent
contract-review-006…
 Legal 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Customer Complaint Agent
complaint-agent-007…
 Support 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Fraud Detection Agent
fraud-detect-008…
 Finance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
KYC Verification Agent
kyc-verify-009…
 Finance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Content Moderation Agent
content-mod-010…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Sales Qualification Agent
sales-qualify-011…
 Sales 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Email Automation Agent
email-auto-012…
 Marketing 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Document Processing Agent
doc-process-013…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Translation Agent
translation-014…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Code Review Agent
code-review-015…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Data Extraction Agent
data-extract-016…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Invoice Processing Agent
invoice-proc-017…
 Finance 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Appointment Booking Agent
appt-booking-018…
 Support 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Social Media Agent
social-media-019…
 Marketing 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
Research Summarizer Agent
research-sum-020…
 Other 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✓
✓
6/7
 PCI READY
erohifgwrt
ag-erohifgwrt-852423…
 Selecciona categoría 1 0% 0 0 0 0% 0
✓
✓
✗
✓
✓
✗
✓
5/7
 PARTIAL
Generated 26/07/2026 02:37 · TrustLayers.eu · PCI DSS v4.0 · hello@trustlayers.eu