PCI

“We understand the effort it takes to achieve and maintain PCI standards. We began the process with one of our largest clients in the UK in 2007 and understand it would become a matter-of-course for all software vendors shortly thereafter. These ever-changing standards will present particular technology hurdles for the smaller software vendors to overcome and for businesses in general to understand the possible ramifications of not having accredited PCI compliant software - Quite simply, the risks are too great.”

Some software vendors have simply stated that the costs are too great to pursue certification for their software products. This leaves their clients open to potential risks moving forward and the possibility of being denied credit card processing services.

The Payment Card Industry Data Security Standard (PCI DSS) Program is a mandated set of security standards that were created by the major credit card companies to offer merchants and service providers a complete, unified approach to safeguarding credit cardholder information for all credit card brands.

With the introduction of PCI III DigitalRez decided to make sure that RezExpert became "out-of-scope" for PCI Compliance. Which means that nowhere in our systems do we store or process credit card information. We have integrated with third party gateways and processors to ensure that the transactions are PCI Compliant.