Definition

Cardholder Data Environment (CDE)

The Cardholder Data Environment, or CDE, is the part of your infrastructure that stores, processes, or transmits payment card data, plus any systems connected to it. PCI DSS applies most heavily inside this boundary, so defining it accurately shapes the entire compliance effort. Smart teams shrink the CDE through segmentation, isolating card data on a tightly controlled network so the rest of the business stays out of scope. A smaller CDE means fewer systems to secure, test, and document. Getting the boundary wrong, on the other hand, can quietly pull dozens of extra servers into scope and inflate the audit.