AI + PCI DSS: What Happens When AI Enters the Cardholder Data Environment?

What happens when AI enters the Cardholder Data Environment? As organizations introduce AI assistants, agents and AI-enabled applications into payment environments, traditional assumptions around PCI scope, access, data flows and security controls start to change. In this episode of the Z1 Security Podcast, I’m joined by Rick Melleck, PCI Qualified Security Assessor (QSA), and Ali Aleali, Co-Founder & CEO of Truva Cyber, to explore where AI fits into PCI DSS and what security teams should be thinking about now. We discuss: • How AI can change the boundaries of the Cardholder Data Environment (CDE) • What PCI assessors are seeing as organizations adopt AI • AI access to cardholder data and payment systems • Identity, APIs, integrations and third-party risks • Data leakage, logging and changing trust boundaries • AI agents and their potential role in payment environments • Using AI for vulnerability discovery, code review and security testing • Why human validation and accountability still matter • The role of security architecture in understanding AI risk • Why organizations need to understand architecture and data flows before deciding on controls The bigger question isn't simply whether AI is secure. It's: *Has AI changed what your CDE actually looks like?* Hosted by Mukta Soni | Z1 Security About the Host Mukta Soni is the Founder of Z1 Security and a cybersecurity leader specializing in security architecture, cyber risk and strategic security advisory. She works with organizations to translate complex technology and business change — including AI and emerging technologies — into practical security architecture and controls. Z1 Security provides cybersecurity advisory and security architecture consulting, helping organizations translate business and technology change into practical security architecture, risk and controls. About Z1 Security Z1 Security provides cybersecurity advisory and security architecture consulting, helping organizations translate business and technology change into practical security architecture, risk and controls. 🌐 Z1 Security: https://z1security.ca #CyberSecurity #ArtificialIntelligence #PCIDSS