WebSell is a third-party certified Payment Card Industry Data Security Standard (PCI-DSS) Level 1 Service Provider. This assures the highest level possible when it comes to industry standards in e-commerce payment security, set by the PCI Security Standards Council, which is sponsored by the card brands themselves (Visa, Mastercard, American Express).
Furthermore, our software and online services are subject to annual external and internal penetration testing, as well as weekly external security scanning from an Approved Scanning Vendor (ASV).
To ensure the highest level of protection, our infrastructure includes industry-leading Intrusion Detection Systems (IDS) provided by AlertLogic, Cisco ASA hardware firewalls, and web application security firewalls to detect and mitigate threats and attacks at all levels.
The latest SSL/TLS encryption is used to securely transmit your shoppers’ card details to payment gateways on your behalf and we never store sensitive card details such as the full PAN (primary account or card number) or CCV code.
All of the synchronizations between your in-store POS system and your WebSell webstore is also conducted over the same SSL endpoints.
Our annual on-site security audit is conducted by Trustwave, the leading provider of PCI-DSS compliance, with Payment Security Council-certified Qualified Security Assessors (QSAs) and rigorous processes, are in place to ensure the safety of cardholder data.
While they may claim to be, none of our direct competitors has the same high level of payment security certification. Ask them for an Attestation of Compliance (AoC) signed by a Qualified Security Assessors (QSA), and check for them in the Visa Global Registry of Service Providers.