Credit card security

PCI standards require that you protect credit card information in multiple ways. You must protect data during storage and transmission. With a hosted payment solution, such as CenPOS or Stripe, your credit card processor stores and protects your customer cardholder data (CHD) in their servers, so you are not storing CHD locally on your systems.

In addition, because the CHD is entered directly into the credit card processor's system and not into Distribution SX.e, other users do not have access to the data.

You can still limit operator access to credit card-related modules using SA Operator Setup-Function Security. For example, you may want to limit operator access to Customer Credit Card Setup.

Note: Keep in mind that, because your operators are handling cardholder data (CHD), you must still meet other PCI requirements pertaining to data access. For more information on PCI compliance, including data access requirements, visit the Official PCI Security Standards Council Site (pcisecuritystandards.org).