PCI / PA-DSS compliant

[mwinkle]

We're using GetPaid with authorize.net for a client, and now their
credit card merchant is saying they need to be PA-DSS compliant.

Has anybody have any information on this?

Thanks so much!

Melody Winkle
Web Collective

[Darryl Dixon]

I haven't used authorize.net, but basically, if this is an asynchronous processor (eg, the user is sent offsite to an authorize.net page to input their CC details), then PCI-DSS is not a concern for you, as you are not handling the CC transactions yourself. PCI-DSS compliance is one of the main reasons to 'outsource' CC processing to an async processor who handles card details for you. One example of a processor for GetPaid that does this is the getpaid.pxpay plugin, which uses PaymentExpress to handle the CC details (http://www.paymentexpress.com/index.html).

regards,
Darryl Dixon
Winterhouse Consulting Ltd
http://www.winterhouseconsulting.com

--
GetPaid for Plone: http://www.plonegetpaid.com (overview info) | http://code.google.com/p/getpaid (code and issue tracker)
You received this message because you are subscribed to the Google Groups "getpaid-dev" group.
To post to this group, send email to getpa...@googlegroups.com
To unsubscribe from this group, send email to getpaid-dev...@googlegroups.com

For more options, visit this group at
http://groups.google.com/group/getpaid-dev?hl=en?hl=en

[Christopher Johnson]

We've got a client that is a payment processing company and they have to achieve the highest level of PCI compliance. They haven't had any issues with GetPaid, as we don't store any cc info. 

They also were behind implementing async processing with Authorize.net, in case you are interested to use that for extra assurance. 

-c

--
GetPaid for Plone: http://www.plonegetpaid.com (overview info) | http://code.google.com/p/getpaid (code and issue tracker)
You received this message because you are subscribed to the Google Groups "getpaid-dev" group.

To post to this group, send email to getpa...@googlegroups.com
To unsubscribe from this group, send email to getpaid-dev...@googlegroups.com

For more options, visit this group at
http://groups.google.com/group/getpaid-dev?hl=en?hl=en

--
Cofounder and CEO
ifPeople - Innovation for People
www.ifpeople.net
t: 678-608-3408
130 Boulevard NE, #6
Atlanta, GA 30312

[Melody Winkle]

To follow up - the client was satisfied with this information.    I'll let you all know if more happens.   Thanks to those to replied.

Melody Winkle

Web Collective