I work for a firm that, among other things, sells reviews and certification around data security standards, and credit card data standards specifically - the only surprise for me on that page, is how prominently they have broadcast it - and I think that is a great surprise - good on them for being upfront about it.