Denotes compliance with the PCI Data Security Standards, a set of requirements designed to ensure companies processing, storing or transmitting credit card information properly secure that information.

learn more… | top users | synonyms

0
votes
1answer
480 views

What are the security implications of using Google Analytics?

I'd like to start using an analytics tool (namely Google Analytics) to collect information on how my web app is used, by whom, and what our user's technical capabilities are. As part of the ...
3
votes
5answers
131 views

Attaining credit card data

I've read the many posts on this site that say we are not allowed to store cc numbers if we are not pci-compliant. But, I'm wondering if it is possible to send a CC number through a form to an email ...
4
votes
1answer
544 views

Does including Google Analytics on a page makes you run the risk of failing a PCI audit?

My webshop is currently in the process of becoming PCI compliant. For business intelligence reasons we would like to include Google analytics code (or a code from a similar package) on the checkout ...
3
votes
2answers
75 views

Credit card payments on mobile websites

I am quite confused regarding PCI requirements. Say if I want to develop a mobile web browser based shopping portal, am I allowed to? Under the PCI requirements?
3
votes
2answers
508 views

PCI compliance when using third-party processing

My company is outsourcing the development of our new e-commerce site to a third party web development company. The way they set up our site to handle transactions is by having the user enter the ...
2
votes
2answers
219 views

PCI-Compliance: Automatic saving of Credit Cards to Authorize.net CIM

Our website uses authorize.net CIM to store consumer credit card's securely after a user's initial purchase. We currently do not have an "opt-in" button allowing us to do this. However, after ...
2
votes
1answer
287 views

What are the PCI compliance and security implications for processing payments through my embeddable widget?

I've built a little embeddable Javascript widget that list items for sale for publishers to embed on their site. The current use case is that when the user clicks on an item, they are redirected to my ...
2
votes
1answer
119 views

Off-site Cardholder Data Storage

Is there a service or site out there that will store cardholder data for me? I don't need any kind of transaction processing or recurring billing... I just need somewhere that I can store data on ...
1
vote
2answers
644 views

If I must turn off passive ports to be PCI compliant, how do I upload my website?

Our company is undergoing procedures to ensure we are PCI compliant. My site host tells me that they have disabled passive ports in order to pass the PCI scans. This has the effect of disabling ...
10
votes
5answers
175 views

Is PCI compliance scrutinised?

After reading the very strongly worded recommendations regarding the storage of credit card details here, I've got to wonder - what happens if a non-PCI compliant company starts storing credit card ...