01
Protect data in transit
Encryption helps protect payment data as it moves between systems. Ask which protections apply to your terminal, gateway, and integration.
PAYMENT SECURITY
PCI Compliance & Security
Safeguard your business and your customers’ payment data.
Freedom Processing helps merchants set up and support payment equipment. We coordinate with the banks, processors, and technology providers that serve your account. Card transactions run through the payment systems used by your business and its providers.
Talk to our teamProtection works in layers
The right technology and everyday operating habits work together. Confirm the features available for your specific setup.
02
Reduce exposure with tokens
Tokenization replaces a card number with a substitute value for supported uses. Availability depends on your payment solution and its configuration.
03
Keep access under control
Use individual accounts, strong authentication, and the minimum access each employee needs. Update your payment devices and software and review unusual activity.
UNDERSTANDING PCI DSS
PCI compliance and safer payments
PCI DSS sets requirements for protecting payment account data. A provider’s PCI DSS validation documentation identifies the organization assessed and the services covered. We can help you identify the provider that serves your account and ask what documentation applies to your setup.
Identify where your business accepts, transmits, or stores card data.
Ask your acquiring bank or processor which questionnaire, scans, or assessment apply.
Review access, update systems, train staff, and reassess your setup when it changes.
Explore PCI DSS guidance and PCI P2PE guidance from the PCI Security Standards Council.
Protecting merchant application information
We restrict access to merchant application records to authorized staff. Staff have individual accounts with access based on their work. We revoke access when staff leave the company. See our Privacy Policy for how we receive and handle application information.
Submitting sensitive information
Use the application channel designated for your request when submitting documents for underwriting. If you prefer to submit sensitive information directly to the bank, contact us through Support before completing the website application.
Keep full card numbers, card security codes, PINs, Social Security numbers, bank account details, identity documents, passwords, and one-time codes out of ordinary email, text messages, chat, and general support requests.
Security questions, answered
Does using a payment processor make my business PCI compliant?
Your business still has responsibilities for protecting payment account data. Using a processor can reduce the systems you manage. Ask your acquiring bank or processor which responsibilities and validation steps apply to your business.
How do encryption and tokenization differ?
Encryption makes data unreadable without the right key. Tokenization substitutes a value for the card number for supported uses. A validated point-to-point encryption (P2PE) solution applies to a defined configuration. Ask which solution and equipment are covered for your account.
How do I confirm the security features in my account?
Tell us your terminal model, gateway, and how your payment system is connected. We can help identify the applicable features and provider documentation, including whether your configuration supports validated P2PE.
What if I notice suspicious payment activity?
Contact Support promptly if you suspect fraud, unauthorized access, or exposure of information. Identify the account, location, or equipment involved and describe what happened without including sensitive data. Follow incident instructions from your processor or acquiring bank. We review your report and help connect you with the responsible provider when its systems or services are involved.
YOUR NEXT STEP
Review your payment security setup
Talk with our team about your equipment, payment integration, and next steps.