The Payment Card Industry Data Security Standard (PCI DSS) is a proprietary information security standard administered by the PCI Security Standards Council.

PCI DSS is a set of network security and business best practices guidelines adopted by the PCI Security Standards Council to establish a “minimum security standard” to protect customers’ confidential payment card information. The scope of the PCI DSS includes all systems, networks, and applications that process, store, or transmit cardholder data, and also systems that are used to secure and log access to the systems in scope.

PCI DSS applies to entities that store, process, or transmit cardholder data (CHD) or sensitive authentication data (SAD), including merchants, processors, acquirers, issuers, and service providers.

The PCI DSS is mandated by the card brands and administered by the Payment Card Industry Security Standards Council.

Card-not-present merchants (e-commerce or mail/telephone-order) that have fully outsourced all cardholder data functions to PCI DSS validated third-party service providers, with no electronic storage, processing, or transmission of any cardholder data on the merchant’s systems or premises.

As part of our data security commitment to our valued client’s, IQumulate Premium Funding practices the highest security standards with our approach to PCI compliance ensuring we regularly perform data health-checks, system performance and SAQ-A self assessment.

IQumulate Premium Funding does not store, process or transmit cardholder data. We rely on third party service providers to handle transactions and have implemented secured iframes for our payment processors, so we never store, process or transmit cardholder data.