> ## Documentation Index
> Fetch the complete documentation index at: https://clickhouse.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# PCI onboarding

> Learn more about how to onboard to PCI compliant services

export const Image = ({img, alt, size = "lg"}) => {
  const normalizedSize = ["sm", "md", "lg"].includes(size) ? size : "lg";
  return <div className={`ch-image-${normalizedSize}`}>
      <Frame>
        <img src={img} alt={alt} />
      </Frame>
    </div>;
};

export const EnterprisePlanFeatureBadge = ({feature = 'This feature', support = false, linking_verb_are = false}) => {
  return <div className="enterprisePlanFeatureContainer">
            <div className="enterprisePlanFeatureBadge">
                Enterprise plan feature
            </div>
            <div>
                <p>{feature} {linking_verb_are ? 'are' : 'is'} available in the Enterprise plan. {support ? `Contact support to enable this feature.` : 'To upgrade, visit the plans page in the cloud console.'}</p>
            </div>
        </div>;
};

export const BetaBadge = ({link, galaxyTrack, galaxyEvent}) => {
  if (link) {
    return <a href={link} target="_blank" rel="noopener noreferrer" className="betaBadge" onClick={galaxyTrack && galaxyEvent ? galaxyOnClick(galaxyEvent) : undefined}>
                <Icon />
                <span>Beta</span>
            </a>;
  }
  return <div className="betaBadge">
            <Icon />
            <span>
                Beta feature. 
                <u>
                    <a href="/docs/docs/beta-and-experimental-features#beta-features">
                        Learn more.
                    </a>
                </u>
            </span>
        </div>;
};

<EnterprisePlanFeatureBadge feature="PCI compliance" />

ClickHouse offers services that are compliant with the Payment Card Industry Data Security Standard (PCI-DSS) and is audited to Level 1 Service Provider requirements. Customers may process primary account numbers (PAN) within these services by enabling this feature and deploying services to a compliant region.

For more information about ClickHouse's compliance program and third party audit report availability, review our [compliance overview](/docs/products/cloud/reference/security/compliance-overview). For a copy of our PCI shared responsibility document, visit our [Trust Center](https://trust.clickhouse.com). Additionally, customers should review our [security features](/docs/products/cloud/features/security) page to select and implement appropriate security controls for their workloads.

This page describes the process for enabling deployment of PCI compliant services in ClickHouse Cloud.

<Steps>
  <Step title="Sign up for Enterprise services" id="sign-up-for-enterprise">
    1. Select your organization name in the lower left corner of the console.
    2. Click **Billing**.
    3. Review your **Plan** in the upper left corner.
    4. If your **Plan** is **Enterprise**, then go to the next section. If not, click **Change plan**.
    5. Select **Switch to Enterprise**.
  </Step>

  <Step title="Enable PCI for your organization" id="enable-hipaa">
    1. Select your organization name in the lower left corner of the console.
    2. Click **Organization details**.
    3. Toggle **Enable PCI** on.

    <br />

    <Image img="https://mintcdn.com/private-7c7dfe99/Ph2XgLY43sq6v4yO/images/cloud/security/compliance/pci_1.webp?fit=max&auto=format&n=Ph2XgLY43sq6v4yO&q=85&s=0a7c1b99cb6ea0f9fb35c57736c40228" size="md" alt="Enable PCI" background="black" width="1043" height="817" data-path="images/cloud/security/compliance/pci_1.webp" />

    <br />

    4. Once enabled, PCI services can be deployed within the organization.

    <br />

    <Image img="https://mintcdn.com/private-7c7dfe99/Ph2XgLY43sq6v4yO/images/cloud/security/compliance/pci_2.webp?fit=max&auto=format&n=Ph2XgLY43sq6v4yO&q=85&s=833b14b8a713701d7392df3b5d860c3a" size="md" alt="PCI enabled" background="black" width="1049" height="823" data-path="images/cloud/security/compliance/pci_2.webp" />

    <br />
  </Step>

  <Step title="Deploy services to PCI compliant regions" id="deploy-pci-regions">
    1. Select **New service** in the upper left corner of the home screen in the console
    2. Change the **Region type** to **HIPAA compliant**

    <br />

    <Image img="https://mintcdn.com/private-7c7dfe99/Ph2XgLY43sq6v4yO/images/cloud/security/compliance/pci_3.webp?fit=max&auto=format&n=Ph2XgLY43sq6v4yO&q=85&s=a7296c2b2d611a2c0cf040221da24b46" size="md" alt="Deploy to PCI region" background="black" width="1023" height="815" data-path="images/cloud/security/compliance/pci_3.webp" />

    <br />

    3. Enter a name for the service and enter the remaining information

    For a complete listing of PCI compliant cloud providers and services, review our [Supported cloud regions](/docs/products/cloud/reference/supported-regions) page.
  </Step>
</Steps>

<h2 id="migrate-to-hipaa">
  Migrate existing services
</h2>

Customers are strongly encouraged to deploy services to compliant environments where required. The process to migrate services from a standard region to a PCI compliant region involves restoring from a backup and may require some downtime.

If migration from standard to PCI compliant regions is required, follow these steps to perform self-service migrations:

1. Select the service to be migrated.
2. Click **Backups** on the left.
3. Select the three dots to the left of the backup to be restored.
4. Select the **Region type** to restore the backup to a PCI compliant region.
5. Once the restoration is complete, run a few queries to verify the schemas and record counts are as expected.
6. Delete the old service.

<Info>
  **Restrictions**

  Services must remain in the same cloud provider and geographic region. This process migrates the service to the compliant environment in the same cloud provider and region.
</Info>