The five major credit card companies Visa, MasterCard, American Express, Discover, Diners created the Payment Card Industry Data Security Standard to assist merchants in the protection of sensitive card holder data. Any merchant that stores, transmits, or otherwise processes sensitive credit card information is required to be PCI Compliant or risk fines up to $500,000 per incident and remediation costs ranging from $90 to $302 per card.
Since the standard was introduced, a lot of focus has been placed on becoming PCI Compliant. However, as a number of recent breaches have demonstrated, compliance does not necessarily equal security. Both need to be properly addressed.
For these reasons, merchants have been turning to Braintree for our innovative solutions that entirely prevent credit card information from ever entering a merchant environment without changing the user experience and providing the merchant full access to the data as though it were present. And without sensitive cardholder data present in a merchant environment, nothing is present to be stolen.
Merchants are leveraging our innovative solutions to reduce the time, cost, and hassle of meeting and achieving PCI Compliance, and simultaneously increasing security.
| With Braintree | In House Approach | |
| Time to become PCI compliant | As few as 60 days | 6 to 18 months |
| PCI DSS Controls to meet | Less than 20 | Over 200 |
| Assessment costs to determine ‘scope’. | $0 | $44,000 to $125,000* |
| Hardware/Software upgrades | $0 | $81,000 to $568,000* |
| Ongoing expenses | Fixed | Variable |
* Gartner estimates merchant Level 1-3
In addition to our PCI Compliance focus and specialty, we offer a full range of products and services to provide merchants with a single solution for all payment processing needs:
New to processing?
Merchant Account Quick Guides
PCI Compliance Quick Guides
Developer Resources