PA DSS & PCI compliance

PCI compliance and PA DSS compliance have been the main topics of many articles published on our blog. However, we feel that a quick update on the subject won’t hurt. Indeed, pandemic made even more people than before prefer electronic payments to cash. Reason: con [...]

The purpose of this article is to explain, how developers of mobile apps can organize the process of accepting payments. In the article we are going to focus on card-not-present payments that app owners need to collect from app users. To those readers, who need to cr [...]

There is no doubt, that the role of mobile devices in our lives is rapidly gaining importance. Nowadays mobile devices and payment applications installed on them are often used for handling of online purchases. In this article we are going to address the ways of maki [...]

All developers of payment applications, at some point in the life of products face the challenge of PA-DSS certification process. In this article we are going to look at this process a little bit more in detail. PA-DSS is an officially adopted data security standard [...]

The purpose of this article is to familiarize different merchant services industry players with the four levels of PCI compliance, and briefly describe some solutions available for level 4 merchants (the most common category), allowing them to go through PCI certific [...]

This is the final installment in a mini-series of posts dedicated to PCI compliance. The purpose of this particular article is to familiarize merchants that have to accept payment card data and store it, so that their software is involved in cardholder data flow, wit [...]

This article belongs to the mini-series providing guidelines for merchants interested in attaining PCI compliance. In this installment we are going to cover the approaches to credit card tokenization and possible solutions that make PCI audit more attainable. If you [...]

This article is the second one in a mini-series describing recommendations to be considered by merchants interested in attaining PCI compliance. In this installment we are going to look into the reasons behind payment card data storage and possible solutions that mak [...]

The purpose of this mini-series of articles is to familiarize small and medium-sized merchants with the concept of PCI compliance and with available solutions allowing them to reduce their (or even get out of) PCI scope. What is PCI compliance about? With the advance [...]