Tokenization & Encryption

One critical way to keep your donor’s payment card data safe and compliant with regards to PCI is via a process called tokenization and encryption. This allows the card data to be hidden as it passes through the appropriate payment systems. Our advanced security solution tokenizes and encrypts all data to ensure it’s safe and secured protecting your nonprofit. This is an added value that you receive from iATS at no additional charge.

PCI Compliance Assistance

There is a lot of information available about PCI Compliance. As a Level 1 certified service provider, iATS is here to help nonprofits understand what PCI is and how it affects their organization. We have a number of tools to help nonprofits become PCI compliant with regard to sensitive credit card data including our own PCI Smart program.

The Payment Card Industry (PCI) Data Security Standard (DSS) was created by the major credit card companies to safeguard and protect customer information. According to these guidelines, all businesses must ensure they meet certain standards of security when storing, processing and transmitting credit card information. In addition to PCI-DSS, there are also requirements that software developers must meet for PCI Compliance set forth in the Payment Application Data Security Standard (PA-DSS).

We provide solutions and developer tools that meet PCI Compliance so you won’t have to worry. Let us help you navigate PCI Compliance.

• PCI Smart Program
• PCI Security Standards Council Website
• PCI Quick Reference Guide (PDF)
• Payment Card Industry Data Security Standard
• Payment Application Data Security Standard
• Infographic: Why PCI-DSS Compliance is a Must-Have

Fraud Protection Tools

In addition to tokenization, encryption and PCI Compliance, we offer several fraud protection tools built into our service with the goal of protecting your nonprofit organization and your donor’s credit card data. These tools can be customized for each organization and our customer care team can work with you one-on-one to identify which level of fraud prevention is required for your needs.

• Address Verification System (AVS)
• Bank Identification Number (BIN) Blocking
• Card Verification Code Requirement Capability (CVV2)
• Card Number Tumbling
• IP Blocking
• IP Velocity Checking
• Minimum Transaction
• Limit Name Tumbling