|
Vernon
|
June 18, 2019 at 6:13 am
Working on our PCI Compliance and wanting to know the flow of data when we are using the First Data Payeezy plugin.
Does data get stored temporarily on our site or does it pass directly to the gateway?
Any documentation would be helpful, Thanks!
|
|
Tony
|
June 18, 2019 at 7:35 am
Hi Vernon,
PCI compliance in itself is not something we can cover in the forums or even fully in our docs, there’s just far too much information to step through.
The First Data Payeezy payment method is an ‘Onsite’ payment method using the Direct API meaning it requires SAQ-D (the ‘highest’ level of compliance) on your end. Card data is not stored by Event Espresso itself, yet all of the details are captured on and sent from your server.
Does data get stored temporarily on our site or does it pass directly to the gateway?
PCI compliance covers not only storage but the transmission of data, which means with that payment method you need the highest level of compliance.
If you are looking for a payment method with a lower PCI requirement on your end I would recommend switching to Stripe or PayPal Express.
|
|
Vernon
|
June 18, 2019 at 7:54 am
Tony thank you very much for the information.
Can a custom payment gateway be set up with a Payeezy URL ?
|
|
Tony
|
June 18, 2019 at 8:01 am
My apologies but I don’t understand your question.
What would a custom gateway do with a Payeezy URL?
If you mean can a custom payment method be created to use a different integration method (for example a hosted checkout) requiring less PCI compliance, then yes but you are basically then building your own payment method, its not a simply a sending a URL.
|
