I have a networked product that we install on customer networks. The device is does not pass any of the CC data, but only sits on the same network (think Nest or Dropcam). The customer networks sometimes include a POS device. We never receive, process, or even see any credit card information. However, since our customer is PCI compliant they want us to be PCI compliant as well.
1) Does PCI compliance require that all of your vendors (i.e me) to also be PCI compliant?
2) All the info and questionnaires I've found are specifically aimed at organizations that actually store or process payment data. Is there a self assessment for situations where I don't transmit any credit card data, but just sit on the same network as POS?
3) If, as this question suggests, I am already PCI Compliant, can I get something that certifies that I don't process any credit card data and am PCI compliant? Note that I don't think I am PCI compliant just because I don't store PAN. The customer would be in trouble if I exposed a security hole into their network (which I don't, but have no piece of 'certification' saying so).