Policy & RegulationPCI DSS 4.0.1 Drags Checkout Scripts Into Scope, and Most Merchants Aren't Ready
An independent QSA tested Reflectiz against the new client-side rules. The verdict: every script running on your payment page is now an auditable surface.