Frequently Asked Question

What are the PA-DSS Expiry Dates?
The Expiry Date for PA-DSS Validated Payment Applications is the date by which a vendor must have the application reassessed against the current PA-DSS requirements in order for the application to remain listed as “Acceptable for New Deployments” on the PCI SSC website.
PA-DSS expiry dates are as follows:
PA-DSS version |
Expiry of application listing |
1.0 |
28 October, 2013 |
2.0 |
28 October, 2016 |
3.0 |
28 October, 2019 |
3.1 |
28 October, 2019 |
3.2 |
28 October, 2022 |
After the Expiry Date, applications are listed as “Acceptable only for Pre-Existing Deployments.” See FAQ #1195 for an explanation of the difference between an application which is “Acceptable for New Deployments” and one which is “Acceptable only for Pre-Existing Deployments.”
June 2015
Article Number: 1275
Related
-
How do PCI standards apply to organizations that develop software that runs on a consumer’s device (for example, a smartphone, tablet, or laptop) and is used to accept payment card data?
-
Which version of PCI DSS should an entity use?
-
Does a P2PE validated application also need to be validated against PA-DSS?