PCI DSS (Payment Card Industry Data Security Standard) compliance is required for every business that accepts cards. Most small businesses qualify for self-attestation via a short SAQ (Self-Assessment Questionnaire) — for a Square or Stripe user, this is essentially automatic. Processors who charge $10–$25/month for 'PCI compliance' are usually wrapping minimal real service into a profit line.
What to do: Ask your processor in writing what the PCI fee actually covers. If the answer is 'access to a portal and an annual SAQ', you can usually get the fee waived or reduced. Some processors (Helcim, Dharma) charge no PCI fee at all. Others (legacy ISOs) treat it as standard padding.