We are looking for a solution for our online payment form that will encrypt the credit card information but allows secure access if we need to view the clients full card info. Any suggestions?
If you use our eProtect service, the card information never touches your systems. Instead, our eProtect system receives the information from your checkout page and returns a Low Value Token, which you then convert to a High Value Token by submitting either a Register Token transaction or any financial transactions (i.e. Authorization, Sale, etc.) You can safely store the HVT on your systems and use it for future transactions. There are many formats you can select for the HVT, many of which retain the last four digits of the card number for use by your customer service group and others. Using one of these formats, usually mitigates the need for most people in your organization to have access to the full card number.
You can view the card information on any particular transaction in our eComm iQ Reporting and Analytics interface, if you have the proper permissions. Keep in mind that you should be very selective when determining you gets this level of viewing permission, since it could have PCI implications and the whole purpose of using a service such as eProtect is to reduce your PCI scope and protect yourself from liability issues should a breach occur.
Thanks for the email. Should I already have access to the eComm IQ reporting? I am not totally clear which software we are eligible for. At the moment we login to auth.vantiv.com which redirects to accessmyiq.com
I dont see this reporting tool. How can I request it? Also can you give me a link for my developer to setup the eProtect? Do I need to subscribe to this? Please advise
Toll-Free USA/Canada 1-888-315-7838
Sorry. When I replied to your original question, I assumed you processed through the Worldpay eComm platform. It seems from the links you provided in your reply that you are processing trough the Worldpay Core platform. Core and eComm have different instances of iQ and to be honest, I am not as familiar with the Core version of iQ. Having said that, I have to believe that there is a permission level that allows access to the actual PAN data, similar to the eComm iQ.
As for setting up eProtect, it is an additional service that you would have to add. Also, I believe there would be some additional Certification testing required. If you want to get info on the set-up, take a look at this doc: Worldpay eProtect Integration Guide V4.0.
I recommend you speak to your Worldpay Relationship Manager to discuss your options and get a better view of the implementation and certification requirement than I can give you.
Retrieving data ...