[thepsi]

Talk to your acquirer - they're the ones who'll be enforcing PCI-DSS compliance/certification on you if required, not the gateway.