Greetings!
I'm setting up Authorize.net in SIM mode using Zencart's built-in module for my company. So far so good. What I'm not understanding, however, is if the store still needs to be PCI compliant even though all the transaction and payment processing is going to happen on authorize.net's PCI-compliant servers. Furthermore, if the following options are set:
- Gateway Mode: Offsite
- Enable Database Storage: True
- Authorization Type: Capture
Will PCI compliance be necessary?
Results 1 to 4 of 4
-
29 Feb 2012, 07:20 PM #1
New Zenner
- Join Date
- Feb 2012
- Posts
- 3
- Plugin Contributions
- 0
Will any of these options make PCI compliance necessary?
-
29 Feb 2012, 07:39 PM #2
Obaa-san
- Join Date
- Jun 2003
- Posts
- 33,715
- Plugin Contributions
- 0
Re: Will any of these options make PCI compliance necessary?
You really need to ask your merchant service company.
Please do not PM for support issues: a private solution doesn't benefit the community.
Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.
-
29 Feb 2012, 07:43 PM #3
New Zenner
- Join Date
- Feb 2012
- Posts
- 3
- Plugin Contributions
- 0
Re: Will any of these options make PCI compliance necessary?
Thanks! Just another question: authorize.net signed us up with "e-online data" and now we have a "merchant account" with them. Is that the firm I need to contact for this information? I'm rather new to this and appreciate your help.
-
29 Feb 2012, 08:21 PM #4
Sensei
- Join Date
- Jan 2004
- Posts
- 66,373
- Blog Entries
- 7
- Plugin Contributions
- 274
Re: Will any of these options make PCI compliance necessary?
If Authorize.net is your merchant account provider, then they're the service company you need to contact for answers to those questions.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Bookmarks