PCI-DSS 3.1 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
PCI-DSS 3.1 reached end of life on 31 Oct 2016. It no longer receives security fixes.
3,569 days without security patches
Recommended action: upgrade to PCI-DSS 4.0.1. Support timeline
Official dates from the PCI-DSS release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 1 Apr 2015 | — |
| End of life | 31 Oct 2016 | 9.8 years ago |
| Latest release | — | final |
Where to go from 3.1
Recommended target: PCI-DSS 4.0.1.
The newest actively supported branch is PCI-DSS 4.0.1 (latest release ).
Frequently asked questions
Is PCI-DSS 3.1 still safe to use?
PCI-DSS 3.1 reached end of life on 31 Oct 2016, 3,569 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download PCI-DSS 3.1?
Yes — the final release (3.1) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade PCI-DSS 3.1 to?
Upgrade to PCI-DSS 4.0.1, the newest actively supported branch.