Payment Security and PCI Compliance

Encryption and tokenization

Card data is encrypted at the point of interaction on supported terminals and readers, and stored card records are replaced with tokens for recurring billing and repeat customers. Your POS and business systems store references, not card numbers, which narrows what an attacker could reach.

PCI DSS

Every business that accepts cards falls in scope for PCI DSS. Using validated terminals and a hosted gateway keeps most merchants in the simplest self-assessment category. We identify the right questionnaire for your setup and walk you through completing it — with no separate PCI fee on your account.

Fraud and chargeback tools

• Address and CVV verification on keyed and online transactions
• Velocity and amount rules to flag unusual activity
• Real-time transaction screening on the gateway
• Chargeback notifications with documentation support

What merchants should do

• Keep terminal firmware current and inspect devices for tampering
• Give each employee their own POS login and remove access at separation
• Never write down or store full card numbers
• Use secure networks and change default passwords on any connected device

Reporting a concern

If you suspect compromised equipment or fraudulent activity on your account, call (828) 600-4775 immediately so we can review the account and, if needed, disable affected devices.