Can we get credit card information out of our account should we decide to leave CheddarGetter?
Discussions are closed to public comments.
If you need help with Cheddar please
start a new discussion.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Marc Guyer on 13 Mar, 2011 12:54 AM
Hi Travis -- That's a bit of a complicated question with a couple of answers.
First of all, CheddarGetter doesn't store credit card numbers, only a reference to a data record at the gateway. The reference is available to you via the API. So, should you choose to leave CG, you can take that with you. However, that wont do you much good unless the provider you move to can use the reference id for the card number in the same way.
Second, whether or not you can get raw card numbers from the gateway depends on the gateway you choose to use. The only gateway I know of which will provide you with decrypted card numbers is our own CheddarGateway. As long as you have provided PCI compliance certification, you may decrypt the card numbers.
Long story short, if you use CheddarGateway with CheddarGetter, you can get your customers' card numbers.
2 Posted by Clay Nichols on 06 Dec, 2011 10:17 PM
"As long as you have provided PCI compliance certification, you may decrypt the card numbers."
What do we need to do to achieve PCI Compliance certification?
3 Posted by adam on 07 Dec, 2011 04:26 PM
There are several independent firms that you can use to become compliant.
http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_St...
https://www.google.com/search?ix=hea&sourceid=chrome&ie=UTF...
The comment from our gateway provider on this issue:
- "In order to have data decryption enabled on an account, the merchant must prove PCI compliance - they will have to send us their certificate. SAQ C+ which could be SAQ C, SAQ D or, Level 1 PCI compliant Service Provider, which would have an ROC (record of compliance) from a third party auditor would be all that would qualify."
adam closed this discussion on 07 Dec, 2011 04:26 PM.