PCI Compliance - Protecting your Member Data!
Flocknote and our third-party payment processor, Stax are committed to data security! One step in their multifaceted approach to data security is compliance with the standards and requirements set by the Payment Card Industry - Data Security Standard (aka PCI Compliance.) In this article we dive more into PCI Compliance, why it's important, and how to ensure your church is up to date!
🔐 What is PCI Compliance?
PCI (Payment Card Industry) compliance is adherence to The Payment Card Industry Data Security Standard, a set of requirements intended to ensure that all companies that process, store, or transmit credit card information maintain a highly secure environment.
Why does my church need to be PCI Compliant? Is this optional?
PCI compliance shows that your church or organization is taking the security measures needed to keep cardholder data secure so you must become compliant within 90 days of your verification date with Stax. This is required so make sure to put this on your to-do list! If by chance you do not become compliant within 90 days of being enrolled in Stax, there is a monthly PCI Non-Compliance Fee of $54.95 until you get that squared away.
How often must my church update its compliance?
The standards for payment processing are constantly advancing, to make sure that your church or organization complies with the most up-to-date requirements, PCI compliance must be renewed annually.
How does the compliance process work?
Calling all controllers! 📣 The compliance process must be completed by the controller for your church's Flocknote online giving account (if you are not the controller, feel free to send these instructions their way.)
- Enroll in SysNet - Stax partners with SysNet Global Solutions to help your church or organization complete the compliance process. The process, start to finish, will happen inside their portal. Once you're enrolled in Stax, you are automatically enrolled in SysNet.
- Welcome Email -Within the first week of being enrolled, the controller will receive a Welcome Email inviting your church or organization to activate their SysNet account. These emails will all come from notifications@complywithpci.com so be sure to keep an eye out for those.
- Activate your SysNet Account - The Welcome Email will Include an activation link. Be sure to click that link and activate your account to keep the ball rolling!
- Complete your (SAQ) - After your SysNet account is activated, follow the steps inside their portal to complete the Security Assessment Questionnaire (SAQ).
- 90 Days ⏰ - Remember this needs to be completed within 90 days of being verified on Stax to avoid a monthly non-compliance fee of $54.95. We know life can get busy so SysNet will send a few reminders to make sure that is completed before the deadline.
- Renewal - Last but certainly not least, you will need to renew your PCI compliance each year. This can be done in just a few minutes! Log into your SysNet account and complete a brief Attestation of Compliance (AOC) survey and you are good to go.
Have more questions about PCI Compliance? Reach out to our team at help@flocknote.com