PCI Compliance
We take data security to the highest level.
Chargeback Advisor
Step by step guidance designed to increase your odds of winning chargebacks.
We take data security to the highest level.
Step by step guidance designed to increase your odds of winning chargebacks.
Cyber threats and security breaches continue to run rampant, and it is imperative that software developers protect customers' card data, as well as defend their own environments against these malicious attacks. Many businesses fall victim to cyber security breaches at least once a year, and the majority of these incidents cost the business over $500,000 to handle.
As a response to this growing threat, as of July 1, 2010 payment applications that store, transmit, or process cardholder data must be validated as secure as defined by the Payment Card Industry Council. PA-DSS is a set of requirements that are not optional for any software being used by merchants that touch cardholder data. These requirements are derived from the Payment Card Industry Data Security Standard (PCI DSS) – which is required for any merchant that accepts credit or debit cards as a form of payment – to help software developers create payment applications that will enable merchants to be compliant.
For more information on PCI DSS Compliance click here.
Our Point-To-Point Encryption (P2PE) technology takes payment applications “Out of Scope” for PA-DSS due to one principal fully accepted by the PCI Security Standards Council. Any system components that simply process and transmit encrypted data, are adequately isolated from the encryption and decryption environments, and have no ability to decrypt the data are excluded from the scope of a PCI DSS review.
In addition to P2PE delivered by Solupay, we provide Hosted Payments options to the developer community that allows their application to bypass touching sensitive cardholder information utilizing our secure Level I PCI compliant facility.
By eliminating cardholder data from a merchant's environment, that merchant’s network is no longer a target and it will significantly reduce their risk, cost, liability, and the hassle of achieving and maintaining PCI compliance.
Ensuring your payment application is validated with the PA-DSS or is out of scope all together means the merchants you serve will be reassured of their security, adding value to your brand.