{"statement_id":"st_73fa50f7ef0551097f57","subject":{"kind":"product","slug":"zscaler","name":"Zscaler","url":"https://sourcetier.com/products/zscaler"},"attribute":{"key":"pci_dss","label":"PCI DSS stated","unit":null,"core":true},"scope":null,"region":null,"first_recorded_at":"2026-09-02T02:29:37.129Z","current":{"claim_id":"ac5f431a-0a24-4b63-802b-6ecffdbba2c8","value":true,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-02","recorded_at":"2026-09-02T02:29:37.129Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:\\bPCI[\\s-]?DSS\\b","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...re-by-Design Pledge HIPAA ISO/IEC 27701 C5 Cyber Essentials Plus HITRUST GDPR TISAX ISMAP PCI DSS CCCS - CSP ITS DCSO Security Assessment NIST 800-53 Rev. 5 MTCS Level 3 ENS IRAP G-Cloud...","sources":[{"url":"https://compliance.zscaler.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-02","role":"evidence"},{"url":"https://compliance.zscaler.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-10-03","role":"evidence"}]},"version_count":1,"versions":[{"claim_id":"ac5f431a-0a24-4b63-802b-6ecffdbba2c8","value":true,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-02","recorded_at":"2026-09-02T02:29:37.129Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:\\bPCI[\\s-]?DSS\\b","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...re-by-Design Pledge HIPAA ISO/IEC 27701 C5 Cyber Essentials Plus HITRUST GDPR TISAX ISMAP PCI DSS CCCS - CSP ITS DCSO Security Assessment NIST 800-53 Rev. 5 MTCS Level 3 ENS IRAP G-Cloud...","sources":[{"url":"https://compliance.zscaler.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-02","role":"evidence"},{"url":"https://compliance.zscaler.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-10-03","role":"evidence"}]}],"changes":[{"id":"31272","type":"documented","label":"First documented","material":true,"sentence":"Zscaler: PCI DSS stated documented (verified). This is a finding of ours, not necessarily a new certification.","noticed_at":"2026-09-02T02:29:37.129Z","subject":{"kind":"product","slug":"zscaler","name":"Zscaler"},"before":null,"after":{"value":true,"verification_state":"verified","confidence":90},"claim_id":"ac5f431a-0a24-4b63-802b-6ecffdbba2c8","statement_id":"st_73fa50f7ef0551097f57","corrected":null}],"page_url":"https://sourcetier.com/statements/st_73fa50f7ef0551097f57","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}