Yes. Commerce is fully PCI compliant, achieved through Guardian, Hellgate's PCI DSS Level 1 certified tokenization service. Card data is captured and stored inside a certified cardholder data environment operated by Hellgate, so raw PANs never need to touch your own systems.

The practical benefit is a dramatically reduced PCI scope for your business – often qualifying for a lighter self-assessment questionnaire instead of a full audit.

→ How Guardian delivers PCI compliance