PCI compliance refers to adherence to the Payment Card Industry Data Security Standard (PCI DSS), a set of requirements that protect credit card information:

The PCI Security Standards Council (PCI SSC) manages the PCI DSS, which is composed of six major payment brands: Visa, MasterCard, American Express, Discover, JCB, and UnionPay.

PCI compliance protects cardholder data and prevents the misuse of personal information.

Service Provider

Files.com is a Level 2 PCI Service Provider.

We are happy to provide our customers or prospects with our Attestation of Compliance (AOC) if needed. Contact your Account Executive or Account Manager to obtain the latest AOC.

• Requirements: PCI compliance requires organizations to meet 12 requirements, including using firewalls, encryption, antivirus software, network monitoring, and access controls.
• Scope: PCI compliance applies to any organization that stores, transmits, or accepts cardholder data, including wireless hotspots, e-commerce applications, point of sale systems, mobile devices, computers, and servers.
• Process: PCI compliance is an ongoing process that involves a self-assessment questionnaire, a security questionnaire, and a security scan.

All credit card information provided to us by our customers is stored in a highly secure, PCI-compliant system by our payment vendors Braintree Payment Solutions and PayPal.