PCI Compliance

Our PCI Process

Data Security is a critical component in every merchant’s payments activities. Mishandling consumer data, poor management practices, and simple lack of knowledge regarding data security has resulted in data being compromised.

Some of these breaches have been very large, with a number resulting in 100s of millions of records being stolen. Some of these breaches occur at the mom and pop store with only one or two records being stolen.

Everyone hears of the large breaches, but the smaller breaches can be just as painful for the consumer, and even more painful for the merchant. Along with any consumer loss that occurs, the merchant faces fines upward of $25,000 for each breach, not just each occurrence. In fact, it could be said that the small merchant suffers proportionally more than the large merchant, as these fines can literally shut them down.

These facts alone emphasize the importance of the PCI compliance process. It begins by completing the PCI questionnaire.

TouchSuite gives a merchant up to 90 days after signing to complete the compliance process. Failure to do so will result in a non-compliance charge until completed.

Should a merchant change their process (for example, begin processing an increased number of non-face to face transactions) a merchant should complete a new questionnaire. This will educate them on the steps needed to protect the data.

Annually thereafter, a merchant must complete the process. Again, the merchant will have 90 days to complete the process.

There is no cost to complete the questionnaire.

The process is painless and found online. Merchants will receive a notice at the time of approval via emails informing them what the next steps are to completion of the questionnaire. To assist, please refer your merchants to the appropriate link below. I encourage you to review these as well so you can walk them through the process.