What PCI DSS Dashboard does

PCI DSS Dashboard is a cloud-based Payment Card Industry Data Security Standard (PCI DSS) compliance management platform operated by Oneiric IT d.o.o., a privately held Croatian company headquartered in Zagreb. The product is purpose-built for organizations navigating PCI DSS compliance and is positioned across five customer segments, including small and mid-sized merchants, payment service providers, e-commerce platforms, and managed service providers (MSPs) that serve multiple downstream compliance clients. The platform tracks over 300 PCI DSS v4.0.1 requirements and was founded by compliance professionals with more than 20 years of payment security experience, which informs the encoding of the control library into the product.

The platform is delivered as a multi-tenant SaaS with architectural choices that broaden its addressable market. It exposes a REST API of more than 40 endpoints, supports multi-client account structures for MSPs operating across several customers, and offers a Docker-based on-premise deployment option for regulated buyers that require data residency on their own infrastructure. AI is integrated into two primary workflows: automated extraction of network diagrams from uploaded compliance documents, and automated evidence compliance checking against the PCI DSS control library. AI inference can be routed to pluggable third-party providers — Anthropic, OpenAI, Google, and xAI — or to a locally hosted model for customers with strict data sovereignty requirements. The vendor also advertises full data export and explicitly disclaims vendor lock-in.

Revenue mechanics combine a freemium entry point with a paid subscription tier for the full platform. The freemium product is an SAQ-A (Self-Assessment Questionnaire A) wizard available for €49 as a one-time fee that produces a compliance PDF; full-platform subscription pricing is not publicly disclosed. Oneiric IT d.o.o. is bootstrapped, with no funding rounds disclosed in available materials, and no customer logos, headcount, or revenue figures have been published. The bulk of platform capabilities — AI features, pluggable AI providers, on-premise Docker, multi-client MSP architecture, and the REST API — were introduced over 2025, indicating that the commercial offering is in an early market traction phase.

Name

PCI DSS Dashboard

Legal name

Oneiric IT d.o.o.

Website

https://pcidss-dashboard.com

Company type

Private

Operating status

Operating

Short description

PCI DSS Dashboard is a cloud-based compliance platform tracking 300+ PCI DSS v4.0.1 requirements. It serves SMB merchants, payment service providers, e-commerce platforms, and MSPs with AI-powered evidence checking, network diagram extraction, multi-client architecture, and on-premise Docker deployment.

Ownership category

akta.pro rank

Product category

Compliance Management Software

NAICS

Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)

akta.pro secondary industries

Cloud Security Posture Management (CSPM) (HDABAHAA), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Data Security & Access Governance for Data (Entitlements/Policy Enforcement) (HDAEADAH), POS Certification, Testing & Compliance (EMVCo, PCI PTS/PCI DSS) (FSAMADAL)

Keywords

• PCI DSS compliance
• SAQ self-assessment
• Compliance management
• Evidence repository
• Payment security

Headquarters

HQ city

Zagreb

HQ country

Croatia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Freemium SAQ-A Wizard: Core SAQ-A wizard is free to complete. Users pay €49 one-time fee only when downloading signed, submission-ready PDF. No subscription required for basic SAQ-A use.
2. Full Platform Access: Subscription-based access to complete platform including all 300+ PCI DSS requirements, evidence repository with 10GB storage, compliance dashboard, reporting, and data import capabilities. Pricing not publicly disclosed.

Pricing tiers

Go-to-market motion4 records

Distribution channels3 records

Marketing channels5 records

Core offering

PCI DSS Dashboard is a cloud-based PCI DSS compliance management platform that helps MSPs and merchants track 300+ PCI DSS v4.0.1 requirements, centralize evidence collection, and complete SAQ self-assessments. The platform provides AI-powered network diagram extraction, AI evidence compliance checking, multi-client role-based dashboards, and generates signed SAQ-A and SAQ-D PDFs for submission. Free SAQ-A wizard available; full platform access sold via subscription.

Product overview

PCI DSS Dashboard is a unified PCI DSS compliance management platform built for MSPs and growing businesses. The core platform centers on an AI-powered dashboard that tracks 300+ PCI DSS v4.0.1 requirements with integrated requirement tracking, evidence repository, and AI compliance analysis capabilities. The platform includes guided SAQ Wizards (SAQ-A and SAQ-D) that translate requirements into plain English and generate signed submission-ready PDFs. Supporting modules include Asset & Diagram Analysis (with AI-powered network diagram extraction), Vulnerability Management, Security Controls Management, Policy & Change Management, and Multi-Client Support with role-based access. A key differentiator is the QSA Export Package that provides full data portability as a structured ZIP organized by requirement. On-premise Docker deployment is available for organizations requiring data residency.

Differentiator

Problem solved

Functional benefit

Products and services

• PCI DSS Dashboard (Core Platform) AI-powered PCI DSS compliance management platform designed for MSPs and growing businesses. Tracks 300+ PCI DSS v4.0.1 requirements, manages evidence collection, and supports multiple SAQ types (A through D) with role-based multi-client dashboards. Features requirement tracking, evidence repository, AI compliance analysis, asset and diagram analysis, vulnerability management, security controls management, policy and change management, multi-client support, and QSA export package.
• SAQ-A Wizard Guided compliance wizard for SAQ-A self-assessment that walks through all 27 SAQ-A requirements in plain English with plain-language explanations. Free to complete assessment; €49 one-time fee for signed, submission-ready PDF download in PCI DSS v4.0.1 compliant format. Tracks third-party service providers and Stripe/PayPal/Adyen integrations. Built for e-commerce merchants using hosted payment pages.
• SAQ-D Dashboard Full PCI DSS compliance dashboard covering all 300+ PCI DSS v4.0.1 requirements for merchants and service providers who do not qualify for simpler SAQ types. Includes requirement tracking, evidence repository, vulnerability management, security controls, policy and change management, asset and diagram analysis.

Quantifiable outcome

• 80% less admin time
• +3 more outcomes

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature8 records

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Vanta: Leading automated compliance platform supporting SOC 2, ISO 27001, HIPAA, and PCI DSS via in-house audits and integrations. Closest head-to-head competitor in PCI DSS automation, with much larger multi-framework coverage and a venture-backed go-to-market.
• Sprinto: Cloud-based compliance automation for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR and more. Similar mid-market and MSP-adjacent ICP, with comparable PLG-style onboarding and centralized evidence collection.
• Secureframe: Compliance automation with PCI DSS, SOC 2, HIPAA, and ISO 27001 in a single platform. Competes for the same SMB and mid-market merchant segment that PCI DSS Dashboard targets with its free SAQ-A wizard.
• Thoropass: Compliance automation combined with in-house audit expertise for SOC 2, ISO 27001, HITRUST, HIPAA and PCI DSS. Comparable horizontal compliance product, with an additional audit-services model aimed at the same level-2/3/4 merchants.
• Hyperproof: Compliance operations platform tracking controls across multiple frameworks including PCI DSS. Comparable evidence-mapping and control-monitoring workflow, with a stronger tilt toward larger enterprise programs.
• Drata: Continuous compliance automation platform natively covering PCI DSS alongside SOC 2, ISO 27001, HIPAA, and HITRUST. Directly comparable product scope and target market, overlapping with PCI DSS Dashboard's MSP and mid-market merchant ICP.

Broad incumbents

• Tugboat Logic: Earlier-stage compliance automation specialist for SMBs (SOC 2, PCI DSS) now operating inside the OneTrust GRC ecosystem. Directly comparable historical product, but now positioned as a component of a much broader trust-management suite.
• OneTrust: Largest trust intelligence platform spanning privacy, GRC, ethics, and ESG — including compliance automation (formerly Tugboat). A potential adjacent competitor for any buyer consolidating trust programs rather than running a PCI-only stack.
• AuditBoard: Large enterprise audit, risk and compliance platform covering SOX, ITGCs, and operational audits with adjacent compliance capabilities. Anchors the upper end of the market where PCI DSS Dashboard doesn't currently compete.

Emerging players

• Securicy: Smaller compliance automation vendor with a similar customer profile of SOC 2 and PCI DSS-focused SMBs. Overlaps with PCI DSS Dashboard on target buyer and pain points, though with a narrower feature set.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about PCI DSS Dashboard