So I looking to providing cloud PBX services as a reseller and have currently signed up with a white label company that has poor customer service relations. {EX} I possed a question to the company about their PCI DSS compliance and it took them nine days to give me an answer. The answer was very vague, they stated that they did follow PCI DSS compliance because their system was behind a firewall but I am under the understanding that PCI DSS compliance requires a certification of ones system based on intrusion test results. Does anyone have any input on the matter?