Depending on your merchant account provider your shop may be required to complete a PCI Compliance questionnaire and scan, with an occasional email survey. These items are provided and sent by your merchant account provider, not Floranext.
Any PCI Compliance questionnaires or scans that may be required by your chosen merchant account provider is the shop's responsibility to complete, not Floranext.
Any fees associated with PCI Compliance should be directed toward your Gateway or Merchant.
Note: Merchants processing with Stripe DO NOT need to complete PCI compliance as they are automatically PCI compliant and do not require an annual scan (if you would like to speak to Floranext about the benefits of processing with Stipe, please email [email protected])
TABLE OF CONTENTS
USAePay PCI Compliance
PCI compliance refers to the security standards that businesses must follow to protect credit card data during transactions and storage.
When using USAePay, your shop is required to complete quarterly or yearly scans and a questionnaire to ensure PCI compliance based on your merchant requirements. These steps help maintain the security of credit card data. Not completing these scans or questionnaires can result in fines/fees and disconnection of services.
To ensure PCI compliance, you must follow the guidelines provided by your merchant that is connected to USAePAY. This typically includes completing required scans, questionnaires, and implementing secure practices for handling credit card data in your shop.
Note: Floranext cannot directly assist customers with their PCI compliance. Compliance is largely related to the security processes, practices, and functions you implement in your floral shop in relation to credit card data. Any questions you may have need to be directed toward your merchant.
Floranext PCI Compliance
Floranext's florist websites meet all 6 categories of PCI standards:
- Maintain a Secure Network
- Protect Cardholder Data
- Maintain a Vulnerability Management Program
- Implement Strong Access Control Measures
- Regularly Monitor and Test Networks
- Maintain an Information Security Policy
Floranext is PCI Compliant and can provide shops Self-Assessment Questionaire D and Attestation of Compliance information upon request.
Note: TSL V 1.0 has been discontinued for the admin side of the Floranext software. to keep the support for older browsers on the front end as long as possible, we still support TLS V 1.0 for visitors to your e-commerce site. We will phase this out by June 30th, 2018 as per the schedule set forth by the PCI Committee.
