NetSuite is committed to the protection of cardholder data in support of its customers’ PCI obligations. NetSuite completes an independent PCI Level 1 Service Provider assessment at least annually. This assessment is scoped to include NetSuite systems, associated applications, network configurations, and development activities.