Staying PCI compliant

The Payment Card Industry Security Standards Council sets forth security standards to protect credit card data called the Payment Card Industry Data Security Standards (PCI-DSS or PCI for short). Entities that transmit, process or store credit card information are expected to abide by PCI.

You can use hosting to set up your online presence and product catalog. You can then work with a third-party provider to process payments on your behalf to keep credit cards off your server (for example: PayPal Checkout, Square Online Checkout and Stripe Checkout). Make sure you're aware of any other requirements to keep your business PCI compliant.

If you prefer to accept payments directly on your site, we offer PCI-certified products like . PCI compliance is a joint effort. When you use one of our PCI-certified solutions, we design our processes and systems to protect your customer's credit card information and need you to protect your account.

Note: If you accept payments over the phone, you may be subject to added requirements to secure your phone systems and computers used by your call center agents.

More info

• WordPress Help: Update WooCommerce payment methods