I&#x27;ve worked at shops that don&#x27;t meet PCI DSS.  It&#x27;s a sticking point, and we WANT to comply, but also don&#x27;t want to spend the money to comply, and the processor wants us to comply too, but they&#x27;d rather have our business than give us the boot for not meeting PCI DSS.