Connect with us

Global Banking and Finance Review is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website. .

Top Stories

PAYPOINT ANNOUNCES CARDLOCK – SIMPLIFYING API CARD PAYMENTS
Plastic card

Published : , on

PayPoint introduces a new PCI DSS compliant solution enabling online merchants to easily secure card payments in their own websites

PayPoint, an international leader in payment technologies, announces CardLock, a secure payments plugin which helps e- commerce merchants drastically reduce PCI Data Security Standard (PCI DSS) responsibilities in their existing websites by almost 60%.

CardLock is an invisible token-based solution which has been designed to work alongside PayPoint’s payments API, allowing merchant websites and applications to retain their seamless consumer experience without the need to handle or store sensitive card data. The token based solution has been developed with merchants in mind, enabling them to retain full control of their overall payments experience whilst significantly reducing the PCI burden.

Historically, consumers have been passed to webpages hosted by the payments provider, who would collect and manage sensitive card data directly. But this is often a significant compromise for merchants in addressing PCI responsibilities. Many third party providers offer only simple hosted webpages which don’t meet the needs of today’s organisations, who want to own, manage and control their own customer experience across a range of mobile and online services.

With CardLock, the merchant’s own user experience runs throughout the process, with sensitive card data discretely intercepted and secured by the PayPoint plugin prior to payment submission. This resolves some of the issues faced by merchants fulfilling their PCI DSS obligations, who do not want to move to a full-redirect model for e-commerce transactions and yet wish to significantly reduce the overall number of requirements to meet compliance standards.

By securing card details at source, directly within the merchant payment form, no payment card data is stored, processed or transmitted by the merchant, even in subsequent API payment requests resulting from their servers. This significantly reduces the scale of PCI DSS compliance and therefore enhances the options available to e- and m- commerce merchants in addressing this obligation.

Leading Visa and MasterCard approved Qualified Security Assessor (QSA) and PCI experts Nettitude commented on the PayPoint solution “With over two decades of experience in the Compliance industry, we know all too well how important it is to be compliant but we also know that this means a compromise for many. With PayPoint’s CardLock plugin, merchants who use a payments API, have the flexibility of retaining their overall payment experience without handling sensitive card data.”

Leading Visa and MasterCard approved Qualified Security Assessor (QSA) and PCI expert Nettitude commented on the PayPoint solution: “With PayPoint’s CardLock plugin, merchants who use a payments API have the flexibility of retaining their overall payment experience without handling sensitive card data,” said Nigel Gildea, Principal Security Consultant at Nettitude.  “Having had an opportunity to review the transaction flow and implementation guidelines, Nettitude is satisfied that CardLock meets the card flow requirements defined by Visa Europe to allow merchants to reduce their PCI-DSS certification requirements from SAQ D, to SAQ A-EP, which could mean a control reduction of up to 57% for many merchants.”

Dan Salmons, Managing Director, PayPoint Mobile and Online comments, “CardLock has been specifically designed to fit in with a merchant’s existing systems so that they retain full control over their customers’ checkout experience, even though our service invisibly tackles the security of cardholder data, and later handles the actual payment for them too.”

“The added bonus of PayPoint having held PCI DSS compliance for ten years takes an extra weight off their minds –effectively they’re outsourcing the large majority of their PCI compliance to a market leader. Having held this standard for more than a decade, we’ve designed compliance into our own systems and working processes.  As a result, we’re seeing more and more organisations approaching us to use solutions like CardLock and reduce their PCI burden, leaving them to do what they do best.”

PCI Data Security Standards are a comprehensive set of guidelines designed to ensure the highest levels of protection for cardholder data. They apply to all businesses that process, store and transmit sensitive cardholder information, and certification must be renewed annually.  As the CardLock plugin significantly reduces PCI responsibilities, digital merchants can continue to develop their own mobile and online consumer experiences, safe in the knowledge that PayPoint have removed the compromises necessary to avoid many of these rigorous, time-consuming, and costly compliance tasks.

Uma Rajagopal has been managing the posting of content for multiple platforms since 2021, including Global Banking & Finance Review, Asset Digest, Biz Dispatch, Blockchain Tribune, Business Express, Brands Journal, Companies Digest, Economy Standard, Entrepreneur Tribune, Finance Digest, Fintech Herald, Global Islamic Finance Magazine, International Releases, Online World News, Luxury Adviser, Palmbay Herald, Startup Observer, Technology Dispatch, Trading Herald, and Wealth Tribune. Her role ensures that content is published accurately and efficiently across these diverse publications.

Global Banking & Finance Review

 

Why waste money on news and opinions when you can access them for free?

Take advantage of our newsletter subscription and stay informed on the go!


By submitting this form, you are consenting to receive marketing emails from: . You can revoke your consent to receive emails at any time by using the SafeUnsubscribe® link, found at the bottom of every email. Emails are serviced by Constant Contact

Recent Post