PlanetScale Managed has been issued an updated PCI Attestation of Compliance (AoC) and Report on Compliance (RoC), re-certifying our compliance with the PCI Data Security Standard v4.0.1 as a Level 1 Service Provider.
Where previously our scoping only included Managed deployments on AWS, PCI compliance is now possible with any PlanetScale Managed deployment, regardless of whether the data plane is deployed in your own AWS or GCP account. Be sure to review our updated Shared Responsibility Matrix to understand the controls you are required to maintain for your specific deployment.
If you are interested in running PCI-scoped workloads on PlanetScale Managed, contact us for details. Existing enterprise customers may request the latest copies of our PCI reporting by visiting our Trust Center.