If you are a Canadian Call Center processing US Credit Cards for US residents over the phone for another reseller do you have to be PCI compliant? Assume no software is hosted or stored on premise bit is done by a 3rd party based in US. What regulations does the Call Center fall under?