Very Good Security removes direct Payment Card Industry compliance obligations from the operational scope of merchants