_

PCI Compliance certified by Visa U.S.A.

WorldPay, through our processing partner MerchantPartners, is certified as compliant with Visa's Payment Card Industry Data Security Standards (PCI DSS). This program establishes a set of 12 requirements for safeguarding sensitive information and controlling data access. To become certified, organizations must submit to an independent security audit to verify compliance with all twelve requirements. This recognition by Visa underscores our commitment to provide the highest level of security to our merchants and their customers for their card processing needs.

PCI DSS Compliance:

PCI DSS compliance is required of all entities that store, process, or transmit Visa cardholder data, including financial institutions, merchants and service providers. The PCI DSS applies to all payment channels, including retail (brick-and-mortar), mail/telephone order, and e-commerce. Visa Inc.'s compliance programs manage compliance with the PCI DSS with the required program validation.

The PCI DSS offers a single approach to safeguarding sensitive data for all card brands. The PCI DSS consists of twelve basic requirements categorized as follows:

PCI Data Security Standard
Build and Maintain a Secure Network
  1. Install and maintain a firewall configuration to protect data
  2. Do not use vendor-supplied defaults for system passwords and other security parameters
Protect Cardholder Data
  1. Protect stored data
  2. Encrypt transmission of cardholder data and sensitive information across public networks
Maintain a Vulnerability Management Program
  1. Use and regularly update anti-virus software
  2. Develop and maintain secure systems and applications
Implement Strong Access Control Measures
  1. Restrict access to data by business need-to-know
  2. Assign a unique ID to each person with computer access
  3. Restrict physical access to cardholder data
Regularly Monitor and Test Networks
  1. Track and monitor all access to network resources and cardholder data
  2. Regularly test security systems and processes
Maintain an Information Security Policy
  1. Maintain a policy that addresses information security

By complying with the PCI DSS, Visa members, merchants, and service providers not only meet their obligations to the payment system, but also build a culture of security that benefits everyone.

For information regarding PCI DSS, refer to VISA's PCI DSS web site.