Your result
PCI DSS applies to you
Cards that reach you by phone, email, fax or in person are in PCI DSS scope just as online payments are. A card number in a call recording, an inbox or a notebook is a stored card number.
What reduces the work
Card by link: while the customer is on the phone, you send them a link by email or SMS to a secure card form. The card goes straight into our PCI DSS Level 1 vault; you get a token. Nothing is read out, written down or recorded.
- Staff who need to see a card do so on a page we serve, behind a one-time password.
- Charge the stored card through the payment provider you choose, one of 120+ integrations.
- Your systems stay out of PCI scope and your company's PCI DSS scope is drastically reduced.
Tell us where your cards come from and where they need to go
A solutions engineer reviews your card flows with you and shows you what the integration looks like.