DocHub and PCI DSS compliance

The Payment Card Industry Data Security Standard (PCI DSS) is a set of standards designed to protect credit and debit card transactions against data breaches and fraud. Established by the Payment Card Industry Security Standards Council, a global organization, PCI DSS applies to any organization that stores, processes, or transmits cardholder data.

The latest version of the Payment Card Industry Data Security Standard includes 12 requirements that organizations must meet to handle cardholder data securely.

These requirements also act as guidelines for best practices in data security:

1. Install and maintain a firewall to protect cardholder data
2. Use original, not vendor-supplied passwords across systems to protect cardholder data
3. Enable two-fold protection and encryption for cardholder data
4. Encrypt cardholder data that is sent across public networks
5. Install, regularly patch, and update anti-virus software
6. Update software and applications that interact with cardholder data
7. Restrict access to cardholder data
8. Assign individual credentials and IDs to every person with network access
9. Restrict physical access to cardholder data
10. Track and monitor access to cardholder data and network resources
11. Regularly perform vulnerability testing on active security systems and processes
12. Maintain a policy that deals with information security for all personnel

Is DocHub PCI compliant?

In addition to regular vulnerability scanning and information security policy updates, DocHub completes the PCI Self-Assessment Questionnaire (SAQ) to ensure that every required security control is in place.