Here is v1.0 of PCI-DSS from December 2004, same year this company was founded. Doesn't seem very difficult to comply with, it is essentially 'Use a firewall and antivirus and don't use the default password' http://ftp.freenet.at/mar/PCI_data_security_standard.pdf