Security & PCI
Payment security, built in from day one.
Taking cards online means protecting your customers’ data. We follow PCI DSS standards, use tokenization and secure payment gateways, and never store card numbers on our servers.
See it work
Follow a card number until it disappears
The safest card number is the one your business never has. Here is what happens to it between the customer’s keyboard and your records.
-
01 · Typed
4111 1111 1111 1111Into the gateway’s secure field, not your website’s form
-
02 · Encrypted
9f2c…a71eSent over HTTPS, unreadable in transit
-
03 · Gateway
ApprovedThe gateway checks it with the card network
-
04 · Tokenized
tok_8f3k2mThe gateway hands back a token instead of the card
-
05 · Stored
tok_8f3k2mYour records keep the token. No card number anywhere.
How we protect card data
Four layers between a card number and trouble
-
PCI DSS standards
Portals and checkouts are built to the Payment Card Industry Data Security Standard.
-
Hosted payment fields & tokenization
Card details are typed into hosted payment fields and go straight to the payment gateway, which returns a token. Your site and ours only ever see the token.
-
Secure gateways
Authorize.Net, Stripe, PayPal, CyberSource and Heartland handle the sensitive part of every transaction.
-
Hosted & monitored
100% cloud-hosted and monitored, with security renewed every year.
What it means for you
Less PCI scope on your side.
Because card numbers are entered into the gateway’s secure fields and never stored by you or us, your business handles far less sensitive data. That generally makes your own PCI questionnaire simpler.
Your processor will still ask you to complete PCI validation each year. We will help you answer the questions about how your portal works.
- No stored card numbersOnly gateway tokens
- Encrypted in transitHTTPS on every page
- Separate subdomainPayments isolated from your main site
- 24/7/365Monitored hosting
“The security system checks placed by Mobilize Cloud have kept our users’ information safe. To date, we have not experienced any identity theft or issues.”
Are your payment portals PCI compliant?
We build to PCI DSS standards and use tokenization and secure payment gateways, so card numbers are never stored on our servers.
Where are card numbers stored?
With your payment gateway, as secure tokenized profiles. Not on your website and not on our servers.
Do I still need to complete a PCI questionnaire?
Usually yes. Your processor requires annual PCI validation. Using hosted payment fields typically keeps your part simpler, and we help you answer questions about the portal.
What does the $99.99 a year security fee cover?
The annual security renewal for your hosted payment portal. Hosting itself is $100 a month.
Ready when you are
See your online bill pay before you buy.
Give us 15 minutes and we'll mock up payments with your branding, free. No access to your current website needed.
Built and supported by Mobilize Cloud in Dublin, Ohio, since 2012.
or call (513) 498-8999