and can be provided to
customers as evidence of the scope of a service provider’s PCI DSS assessment. However, the specific
type of evidence provided by the service provider to their customers will depend on the agreements/
contracts in place between those parties