As Element of PCI info security expectations, physical cardholder info need to also be stored within a protected site, such as a locked area or storage space with restricted accessibility. Your organization is service supplier primarily based outside the EU. It provides services to customers outside the house the EU. https://www.nathanlabsadvisory.com/blog/nathan/ensure-the-security-of-your-source-code-analysis-in-the-uae/