Electronic Payments

SecureTrading has been confirmed PCI DSS Level 1 compliant for the 5th year, having successfully completed their annual audit.

PCI DSS is a set of standards developed by the leading credit card companies including Visa and MasterCard, in response to credit card fraud and identity theft to standardise the security surrounding card payments. It was developed to improve consumer confidence and to ensure that all merchants who process credit card transactions are meeting the required security standards.

You can view SecureTrading's PCI Certificate of Compliance here. Alternatively you can see our approval status on the Visa website and click on ‘List of PCI DSS compliant service providers’ and on the MasterCard website by clicking on ‘Compliant Service Provider List’.

How does this affect SecureTrading Merchants?

If you are using SecureTrading Payment Pages and only take payments via your website, you will not need to be PCI DSS compliant in your own right. However, if you take payments by any other method, such as through our Virtual Terminal over the telephone or by mail, our PCI compliance will not cover you as we are not responsible for or in control of the environment in which these card details are handled.

If you are using SecureTrading Xpay your systems will still need to be PCI DSS compliant. This is because you are capturing and transmitting card details outside of SecureTrading’s servers and you need to ensure your site is secure.

If you are unsure or have any queries around PCI DSS compliance please contact our Support team on 01248 672 050.