FAQ
PCI DSS Compliance
Is Paymentwall PCI DSS compliant?
Paymentwall is PCI Level 1 certified service provider. This is the highest security level available in the payments industry.
Do I also need to comply with PCI DSS?
Anyone involved in credit and debit card data processing, storage, acceptance, or transmission must comply with PCI DSS.
How can I stay PCI DSS compliant with Paymentwall?
- Secure your payment page with Transport Layer Security (TLS) 1.2 or higher and use HTTPS connection.
- Use Paymentwall’s widget or brick.js to accept payment data, which is securely transmitted directly to our servers without it passing through your servers.
- Fill out an annual Self-Assessment Questionnaire (SAQ).
There are multiple SAQs, which one do I need to fill out?
The table below shows PCI DSS requirements for each integration type.
| Integration Type | SAQ Type |
|---|---|
| Paymentwall widget (iframe) | SAQ-A |
| Brick.js | SAQ-A-EP |
| Direct API / Server-to-server | SAQ-D |
| Other | Contact us |
What happens if PCI standards are not met?
Your ability to accept credit and debit card payments will be suspended.
Who can help me to better understand PCI DSS requirements?
You can always reach us at devsupport@paymentwall.com to get assistance from our team.
