Acceptable Forms of Payment and Staying PCI Compliant

Acceptable Forms of Payment and Staying PCI Compliant

Frequently Asked Questions

Q

PCI Compliance Guide: Email Communication

A

Introduction

Payment Card Industry Data Security Standard (PCI DSS) compliance is essential for any organization that handles credit card information. Adhering to these standards ensures the security of cardholder data and reduces the risk of data breaches. One crucial aspect of PCI compliance is the handling of payment information in email communications. This guide provides an overview of PCI compliance and outlines best practices for handling forms of payment in email communications.

Understanding PCI Compliance

PCI DSS is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. The standard is governed by the PCI Security Standards Council (PCI SSC), which was created by major credit card companies such as Visa, MasterCard, American Express, Discover, and JCB.

The primary objectives of PCI DSS are to:

  1. Protect cardholder data
  2. Maintain a secure network
  3. Implement strong access control measures
  4. Regularly monitor and test networks
  5. Maintain an information security policy

Email Communications and PCI Compliance

Email is not considered a secure method of transmitting sensitive information, including credit card details.

We accept 2 forms of payment currently:

  1. Secure Payment Link on Invoice and Invoice Portal (PCI Compliant Secure Payment Gateway) Accept Major Credit Cards with 0% processing fees!
  2. Mail a Check to: 645 NW Enterprise Dr. Suite 111 Port Saint Lucie, FL 34986 (If your order is due in advance, we cannot proceed with production until we receive the check) *We highly recommend sending your check with tracking and signature required.

Payment Gateway used: Authorize.net which is PCI Compliant gateway service provider.

Adhering to PCI DSS standards is crucial for maintaining the security of cardholder data and protecting all organizations from potential data breaches. By implementing best practices and not accepting forms of payment in email communications, we can further enhance our compliance efforts and safeguard sensitive information for all parties.