The Smart Approach to PCI DSS Compliance

With the PCI Security Standard continually evolving and new threats always emerging, merchants are finding that achieving and managing compliance is more costly, more time consuming, and more resource intensive than anticipated. As recent breaches have proven, even merchants that achieve compliance are finding that PCI compliance management does not equal security.

For these reasons, merchants are turning to Braintree. Our unique solutions prevent credit card data from entering a merchant environment without changing the user experience and offer merchants full control over the data. The scope of PCI Compliance is significantly reduced and no credit card data is present to be stolen. We don’t just solve PCI Compliance problems, we make them go away.

How to Quickly and Easily Achieve PCI Compliance

By using our Transparent Redirect (TR) and Vault, merchants can achieve PCI Compliance in days. TR and the Vault will eliminate the handling, processing or storing credit card data so you can qualify for the Self Assessment Questionnaire A, the shortest of the four SAQs. Download this pre-filled SAQ A version 1.2 as if you had our solutions implemented. You'll need to work with a Qualified Security Assessor to verify your qualification with this version of the SAQ.

4 Easy Steps to PCI Compliance:

• Integrate our Transparent Redirect and Vault. For more information, visit our gateway support center.
• Download the pre-filled SAQ A version 1.2 and verify it is consistent with business practices.
• Contact a Qualified Security Assessor. We recommend Greg Johnson (gregj@securitymetrics.com) at Security Metrics.
• Receive your certificate of compliance.

Note, if you are taking phone orders and entering the credit card information into our web console, you'll need to use the slightly longer SAQ C. A QSA can help you navigate these types of scenarios to make sure you're using the appropriate SAQ.