PCI is the security certification that applies to any organizations & merchants that accepts, transmits or stores any credit cardholder data. If any customer of an organization ever pays the merchant directly using a credit or debit card, then the PCI DSS requirements apply.