A service provider stores, processes, or transmits cardholder data on behalf of other businesses, or could affect the security of others' card data.