PCI Compliance requires that Jackrabbit never display an entire credit card number. Credit card numbers are not stored in Jackrabbit and are stored at your gateway. In Jackrabbit only the first digit and last 4 digits of the credit card are captured when a card is added to a family. The remaining digits display with an asterisk (*).
Our ePayment Partners also provide an additional measure of security by vaulting credit card details. When a family's credit card number is entered and saved in your database, it is immediately transmitted securely (in an encrypted state) to your gateway. The gateway adds this new customer and credit card number to its vault. A Vault ID is sent back to your database, and it replaces the credit card number on the Family Billing Info page. When you process an ePayment for a family using a card saved on file, only the Vault ID is transmitted with the transaction, no credit card information is sent.
Defined by the Payment Card Industry Security Standards Council, this information security standard was created for organizations that handle cardholder information for the major debit, credit, prepaid, eCheck, ATM and POS Cards. This increases controls around cardholder data to reduce credit card fraud via its exposure.
Jackrabbit is enrolled in CertifyPCI's program to provide merchants with Payment Card Industry Data Security Standard (PCI DSS) compliance which is mandated by all major credit card associations. You can view our CertifyPCI Compliance Status Report by clicking the PCI DSS Compliant icon below.