What is eCommerce PCI Compliance?

eCommerce PCI Compliance is now an essential part of any eCommerce site processing payments.  Pace Retail try to make eCommerce PCI Compliance as easy as possible for all our customers.

PCI DSS stands for Payment Card Industry Data Security Standard and is designed to make sure that your company stores, processes and transmits credit card information in a secure environment.

There are 4 levels of PCI Compliance for businesses processing payments over the internet and telephone.  The following is a rough guide on which level your business will be required to meet for compliance:

Level 1 PCI Compliance
Any merchant -- regardless of acceptance channel -- processing over 6M Visa transactions per year. Any merchant that Visa, at its sole discretion, determines should meet the Level 1 merchant requirements to minimize risk to the Visa system.

Level 2 PCI Compliance
Any merchant -- regardless of acceptance channel -- processing 1M to 6M Visa transactions per year.

Level 3 PCI Compliance
Any merchant processing 20,000 to 1M Visa e-commerce transactions per year.

Level 4 PCI Compliance
Any merchant processing fewer than 20,000 Visa e-commerce transactions per year, and all other merchants -- regardless of acceptance channel -- processing up to 1M Visa transactions per year.

Small to Medium Business normally need to meet Level 4 PCI Compliance.  To meet Level 4 PCI Compliance there are 2 areas that need addressing:

1)    Server Compliance - Obtain evidence that the server your website sits on passes PCI Vulnerability scans.
2)    Self Assessment Questionnaire (SAQ) - Submit the SAQ and the Attestation of Compliance, along with any other requested documentation, to your acquirer (bank).

How does Pace Retail help with eCommerce PCI Compliance?

Server Compliance

Pace Retail take care of the server compliance aspect of your eCommerce PCI Compliance requirements.  With each new day additional vulnerabilities are identified and need corrective measures applying to the websites server environment.  All the Pace Retail servers are regularly scanned to make sure your website remains PCI Compliant and corrective measures are immediately applied as and when they are identified.

The server compliance is handled by Pace Retail so you don’t have to worry about it!

Self Assessment Questionnaire (SAQ)

The self assessment questionnaire is the area our customers most often struggle with when trying to achieve eCommerce PCI Compliance.  The Pace Retail support service includes assistance in completing the SAQ so our customers can ring for help whenever it is required.  Pace Retail also provide access to a Self Assessment Questionnaire wizard so that right answers are filled in the first time you complete your question.



"Being PCI compliant offers greater levels of security for us as a company and provides our customers with increased confidence about purchasing online. The team at Pace have been exemplary through out the process and proved once again that they are a professional organisation and more than capable of meeting the requirements of this demanding certification."
Ian Webster - www.dreamicons.com