Why are so many medium-sized American companies so technologically out-of-date?
I have worked for, and with a number of US companies in the last few years, and one of the things that has shocked me, is how technically backward they are...
Especially in payments.
I have worked as a Staff Engineer for a US payments company, and also as a Technical Lead at a Dutch payments company... and it was shocking, how different they were.
When I investigated how things were actually implemented in the US development teams, it was mix-and-match languages, 12-year-old language versions... nobody knew about any form of compliance checklists, or when they had actually been audited. It was smoke and mirrors from the owners, to get by any checks.
You would not be able to retain a licence with that approach, in Europe. Even basic PCI-DSS would be a fail.