PCI DSS and
workplace AI.
Card data pasted into an AI tool is cardholder data outside your controls. PromptGlass detects primary account numbers with Luhn validation, in prompts and in uploaded files, and blocks or redacts them before they leave.
Requirement mapping
How PromptGlass supports PCI DSS
An indicative mapping of themes in the framework to PromptGlass capabilities. Your auditors and counsel determine what applies to you.
| Theme | How PromptGlass helps |
|---|---|
| Protect stored and transmitted account data | ✓PAN detection with block or redact actions on every AI interaction. |
| Restrict access to cardholder data | ✓Policies scoped to identity groups and approved tools. |
| Log and monitor access | ✓Events stream to your SIEM with user, tool and action. |
This page is general information, not legal advice. Using PromptGlass does not by itself make an organization compliant with PCI DSS.
PCI DSS and AI usage: FAQ
Does PromptGlass store the card numbers it detects?
+
No. Detected card numbers are masked in stored events. Only the detection type, position and a non-reversible fingerprint are kept.
Find out how your company really uses AI.
Start a free 30-day AI usage assessment: a complete shadow AI inventory, the sensitive data leaving, and the AI seats you are paying for but not using.