PCI DSS-Compliant ERP & Operations Vendors
ERP & Operations vendors are evaluated against PCI DSS when they handle the workflows this framework governs. Currently, 5 vendors in our ERP & Operations category hold PCI DSS certification and 1 holds it partially or conditionally. Each listing below links to the vendor's full compliance profile.
ERP & Operations vendors that hold PCI DSS certification
SAP
11/32Enterprise resource planning (ERP) software and cloud business applications.
Oracle ERP Cloud
10/32Cloud-based enterprise resource planning suite, part of Oracle Fusion Cloud.
Motive
8/32Fleet management and workforce operations platform (formerly KeepTruckin).
Oracle NetSuite
7/32Cloud ERP, financials, and e-commerce platform.
PCI DSS and PCI SSF
Acumatica
5/32Cloud ERP platform for small and mid-sized businesses.
PracticePanther
1/32Cloud-based legal practice management software for law firms, part of AppFolio.
Billing processed in PCI-compliant manner; no public SAQ/AOC located
These erp & operations vendors do not currently hold PCI DSS certification:
- Certinia (not documented)
- ShipStation (not documented)
- ShipBob (not documented)
- Clio (not documented)
- MyCase (not documented)
- Microsoft Dynamics 365 (not documented)
- Infor (not documented)
- Epicor (not documented)
- IFS (not documented)
- Odoo (not documented)
- SAP S/4HANA (not documented)
- Flexport (not documented)
- project44 (not documented)
- FourKites (not documented)
- Samsara (not documented)
- Onfleet (not documented)
Know a vendor we're missing?