Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

Service Provider

A service provider is defined as an entity that is not a payment brand, and is directly involved in the processing, storage, or transmission of cardholder data on behalf of another entity, or who could impact the security of cardholder data of another merchant or service provider.

Additional resources you might like:

Vendor Risk Management
Blog
The “builder” boom breaking security

Our latest Trust Signals drop explores how builder culture is changing the risk landscape, and what happens when security is still built for a world where only product engineers shipped.

Comparisons and reviews
Video
Why enterprise leaders choose Vanta over Drata to prove and manage trust

Learn how Vanta is uniquely equipped to meet the needs of large, complex organizations.

Compliance
Blog
The 9 compliance risks hiding in your organization (and how to fix them)

Learn what compliance risk is and what its most common types are. Find out how to assess and manage your compliance risk and best practices to follow.

Additional resources you might like:

Vendor Risk Management
Blog
The “builder” boom breaking security

Our latest Trust Signals drop explores how builder culture is changing the risk landscape, and what happens when security is still built for a world where only product engineers shipped.

Comparisons and reviews
Video
Why enterprise leaders choose Vanta over Drata to prove and manage trust

Learn how Vanta is uniquely equipped to meet the needs of large, complex organizations.

Compliance
Blog
The 9 compliance risks hiding in your organization (and how to fix them)

Learn what compliance risk is and what its most common types are. Find out how to assess and manage your compliance risk and best practices to follow.

Comparisons and reviews
Blog
The best TPRM software for 2026

Discover the best third-party risk management software solutions for 2026.

Comparisons and reviews
Blog
Top 5 OneTrust alternatives

Check out top OneTrust alternatives for compliance and risk management.

Comparisons and reviews
Blog
Top 4 Secureframe alternatives

Explore features, limitations, and scalable compliance solutions.

Vendor Risk Management
Blog
GDPR, NIS 2, and DORA converge on one problem: Third-party risk

Discover how EU regulations, GDPR, NIS 2, and DORA, make third-party risk a direct, continuous business liability. Find out why most teams still lack visibility.

Compliance
Events
Auditor basics: A 30 minute guide for startups

In this exclusive live event, we'll cover what audits are, and why continuous compliance separates smooth audits from painful ones.

Compliance
Blog
How to become PCI compliant in three steps

Being PCI compliant can mean different requirements for merchants and service providers. Learn how to become PCI compliant in three easy steps.