PayPal Payments Pro and PCI Compliance Help

4 Apr 2009, 2:37 AM

#1

New Zenner

Join Date:: Jan 2009
Posts:: 2
Plugin Contributions:: 0

PayPal Payments Pro and PCI Compliance Help

PayPal's website for Payments Pro states that you need to be PCI compliant to use Payments Pro. But since Payments Pro stores the CC data on PayPal's server (thankfully), what else do I need to do other than have a 128-bit SSL? (and the things in their manual -- privacy policy, about us, return policy)?

Everyone seems to be making a big deal about PCI Compliance (and rightfully so), but when you signup, does paypal verfiy your PCI Compliance, or are you on your own?

I really don't feel like getting put out of business with a massive fine because my return policy isn't "good enough".

Thanks

3 May 2009, 2:05 AM

#2

camay123

Zen Follower

Join Date:: Oct 2005
Posts:: 160
Plugin Contributions:: 0

Re: PayPal Payments Pro and PCI Compliance Help

I also want to know about this. This is a great question.

My Store: Bonsai tree seeds

3 May 2009, 3:28 AM

#3

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: PayPal Payments Pro and PCI Compliance Help

You should be asking PayPal what their official position is in relation to your questions. Anything else is speculation.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

3 May 2009, 2:07 PM

#4

steven300

Totally Zenned

Join Date:: Jan 2008
Posts:: 1,564
Plugin Contributions:: 1

Re: PayPal Payments Pro and PCI Compliance Help

I'm also considering PayPal Pro but I don't see the need for all the trouble and expenses of PCI compliance seen as no cc data is stored. If anyone gets an answer about this from PayPal, please post here.

Mods: Admin Activity Report || PO Box Ban || Empty Cart Manager || Autoresponder+ || Zip Validator || Desktop Data || SRiC

3 May 2009, 3:12 PM

#5