Skip to main content

Questions tagged [pci-compliance]

Denotes compliance with the PCI Data Security Standards, a set of requirements designed to ensure companies processing, storing or transmitting credit card information properly secure that information.

Filter by
Sorted by
Tagged with
3 votes
2 answers
137 views

Is it ok to filter sensitive user information from GA hits in GTM (rather than in app)?

I'm using GTM to filter out PII in the data sent to Google Analytics. I do this by only letting GTM send non-PII values to GA. So the data flow is the following : app ->(sends full payload)-> GTM ->...
Jad S's user avatar
  • 135
3 votes
1 answer
46 views

PCI Compliance on Non-Transacting Website?

I was wondering if anyone has any experience with an employer that is requesting their site be made PCI Compliant whilst not having any credit card data stored or transmitted through it. The site is ...
Dave's user avatar
  • 31
4 votes
3 answers
8k views

What are the security implications of using Google Analytics?

I'd like to start using an analytics tool (namely Google Analytics) to collect information on how my web app is used, by whom, and what our user's technical capabilities are. As part of the ...
David Smith's user avatar
3 votes
5 answers
158 views

Attaining credit card data

I've read the many posts on this site that say we are not allowed to store cc numbers if we are not pci-compliant. But, I'm wondering if it is possible to send a CC number through a form to an email ...
user avatar
5 votes
1 answer
2k views

Does including Google Analytics on a page makes you run the risk of failing a PCI audit?

My webshop is currently in the process of becoming PCI compliant. For business intelligence reasons we would like to include Google analytics code (or a code from a similar package) on the checkout ...
xenox's user avatar
  • 208
3 votes
2 answers
89 views

Credit card payments on mobile websites

I am quite confused regarding PCI requirements. Say if I want to develop a mobile web browser based shopping portal, am I allowed to? Under the PCI requirements?
ngzhongcai's user avatar
1 vote
2 answers
471 views

Does authorize.net's SIM rid you of having to be PCI compliant?

Does anyone know if authorize.net's SIM rids you of having to be PCI compliant? The payment form is hosted on authorize.net's site and they're processing the payment. I know you can do a relay ...
user avatar
3 votes
2 answers
1k views

PCI compliance when using third-party processing

My company is outsourcing the development of our new e-commerce site to a third party web development company. The way they set up our site to handle transactions is by having the user enter the ...
Moses's user avatar
  • 313
2 votes
2 answers
233 views

PCI-Compliance: Automatic saving of Credit Cards to Authorize.net CIM

Our website uses authorize.net CIM to store consumer credit card's securely after a user's initial purchase. We currently do not have an "opt-in" button allowing us to do this. However, after ...
user avatar
2 votes
1 answer
556 views

What are the PCI compliance and security implications for processing payments through my embeddable widget?

I've built a little embeddable Javascript widget that list items for sale for publishers to embed on their site. The current use case is that when the user clicks on an item, they are redirected to my ...
Josh Deeden's user avatar
2 votes
1 answer
133 views

Off-site Cardholder Data Storage

Is there a service or site out there that will store cardholder data for me? I don't need any kind of transaction processing or recurring billing... I just need somewhere that I can store data on ...
LinuxGnut's user avatar
  • 121
1 vote
2 answers
950 views

If I must turn off passive ports to be PCI compliant, how do I upload my website?

Our company is undergoing procedures to ensure we are PCI compliant. My site host tells me that they have disabled passive ports in order to pass the PCI scans. This has the effect of disabling ...
fearoffours's user avatar
11 votes
5 answers
235 views

Is PCI compliance scrutinised?

After reading the very strongly worded recommendations regarding the storage of credit card details here, I've got to wonder - what happens if a non-PCI compliant company starts storing credit card ...
Mark Henderson's user avatar