What is PCI DSS?

PCI DSS is a set of standards developed by the leading credit card companies, including Visa and MasterCard, in an attempt to combat credit card fraud and identity theft and to standardise the security surrounding card payments. It was developed to improve consumer confidence and to ensure that all merchants who process credit card transactions are meeting the required security standards.

The level of compliance required will depend on how online payments are processed, along with the volume of transactions. A general guide as to what level is required can be found here.

Are SecureTrading PCI DSS accredited?

Yes, SecureTrading have been confirmed PCI DSS Level 1 compliant for the 5th year, having successfully completed their annual audit. You can view SecureTrading's PCI Certificate of Compliance here. Alternatively you can see our approval status on the Visa website and click on ‘List of PCI DSS compliant service providers’ and on the MasterCard website by clicking on ‘Compliant Service Provider List’.

Does SecureTrading’s PCI DSS accreditation cover us, the Merchant?

While PCI DSS compliance is essential to any e-business, it can be a complex, time-consuming and laborious task. As a result SecureTrading have some options that means you don’t have to go through the compliance process.

If you are using SecureTrading Payment Pages and only take payments via your website, you will not need to be PCI DSS compliant in your own right. However, if you take payments by any other method, such as through our Virtual Terminal and over the telephone or by mail, our PCI compliance will not cover you because we are not responsible for, or in control of, the environment in which these card details are handled.

If you are using SecureTrading Xpay your systems will still need to be PCI DSS compliant. This is because you are capturing and transmitting card details outside of SecureTrading’s servers and you need to ensure your site is secure.

If you are unsure or have any queries around PCI DSS compliance please contact our Support team on 01248 672 050 who will be able to provide some guidance. For a full explanation of PCI requirements, however, we would recommend that you contact your Acquiring Bank.