PCI Compliance is mandatory for companies with circuits carrying credit card data. Learn how Sensedia's PCI compliant APIs create a secure environment for your business.
PCI is the required certification for circuits that carry credit card data.
Companies with PCI compliant solutions are able to traffic data and integrate with large credit card transaction ecosystems.
Sensedia's environments with PCI-DSS certification have the highest levels of security; its platforms have monthly vulnerability scans, penetration tests, WAFs and advanced security features such as OAuth 2.0.
Protection of cardholder payment data
1 – Install a working network firewall
2 – Security patches up-to-date
3 – Encrypt stored data
4 – Encrypt transmission of cardholder data across open networks.
5 – Use and update anti-virus software programmes
6 – Restrict access to data by business need-to-know
7 – Assign a unique ID to each person with computer access
8 – Don’t use vendor supplied defaults for system passwords
9 – Track all user access to data by unique ID
10 – Regularly test security systems and processes
11 – Maintain a policy that addresses security
12 – Restrict physical access to cardholder information
Cielo is the biggest payments system in LatAm by revenue and market value. Digital Products Coordinator, Rafael Silveira, explains how APIs supported its payments platform and a large partner ecosystem
More client stories