Security & ComplianceAlso: PCI Compliance

PCI DSS

The Payment Card Industry Data Security Standard — a set of security requirements every business handling card data must meet. Compliance protects customers and merchants and is a baseline expectation of any legitimate processing relationship.

The scope of what you must do depends on how you handle card data; using a compliant gateway and tokenization can dramatically reduce your burden.

Go deeper

Related terms

Security & Compliance

Tokenization

Replacing sensitive card data with a non-sensitive token that can be stored and reused safely. Tokenization lets merchants support recurring billing and one-click checkout without holding raw card numbers, reducing both risk and compliance scope.

Read

Security & Compliance

Encryption

Encoding payment data so it is unreadable to anyone without the key, protecting it in transit and at rest. Strong encryption is a core PCI requirement and the foundation of trustworthy checkout.

Read

Security & Compliance

Card-on-File

Securely storing a customer's tokenized payment credentials for future purchases, subscriptions, or one-click checkout. Done compliantly, card-on-file boosts conversion and retention while keeping raw card data out of your hands.

Read

Ready to get approved?

Tell us about your business. A high-risk specialist will map the fastest path to live payments.

Start my application apply@spectrumepay.com