I am trying to find clarification regarding PCI Compliance SAQ A-EP and third party hosting solutions.
In order to achieve SAQ A-EP PCI Compliance using "Hosting Company A" is it necessary for "Hosting Company A" to be a Certified PCI Compliant Service Provider?
Feel free to expand your response as necessary, but what I am hoping to find is a Yes or No answer and "why".