Your payments are protected.
1. PCI compliance basics for merchants.
What Is PCI Compliance and Why It Matters
PCI DSS (Payment Card Industry Data Security Standard) is a set of rules all businesses that accept card payments must follow. It's not optional — non-compliance can result in fines or losing the ability to accept cards altogether. The good news: most of the heavy lifting is already handled through your Action Payments setup.
2. Terminal security.
Terminals Built to Keep Card Data Safe
Every payment terminal we provide is tamper-resistant and certified to the latest PCI PTS standards. Card data is never stored on the device after a transaction is complete — so even if a terminal is lost or stolen, there's nothing to compromise.
3. Encryption and tokenization.
Two Layers of Protection on Every Transaction
The moment a card is tapped, swiped, or inserted, the data is encrypted before it leaves the terminal. That encrypted data is then replaced with a token — a unique stand-in that's useless to anyone who intercepts it. Your customers' real card details never travel exposed across any network.
4. Fraud prevention tools.
Stop Fraud Before It Costs You
Action Payments includes built-in fraud detection tools that flag suspicious activity in real time. From velocity checks (catching cards being used multiple times in a short window) to address verification on online orders, you have multiple layers working in the background before a transaction is approved.
5. Hosted payment pages.
Secure Checkout Without the Liability
Our hosted payment pages handle card entry on a PCI-certified server — not yours. That means sensitive payment data never touches your website, which significantly reduces your compliance scope and the risk of a data breach on your end.
6. Virtual terminal security.
Safe Manual Entry for Phone and Mail Orders
When your staff processes a payment over the phone or by mail, the virtual terminal keeps that data protected. All entries are encrypted in transit, access is role-controlled by login, and no full card numbers are stored after processing.
7. What Action Payments handles.
What We Take Care of For You
We manage the infrastructure — certified terminals, encrypted gateways, hosted payment environments, and fraud monitoring tools. When you process through Action Payments, the most technically complex parts of PCI compliance are already covered on our end.
8. Rights relating to personal information.
Your Side of the Security Equation
Some responsibilities stay with your business regardless of your payment provider. These include keeping your point-of-sale area secure, not writing down or storing card details manually, training staff to recognise skimming devices, and completing your annual PCI self-assessment questionnaire (SAQ). We can point you in the right direction on all of these — just reach out to our support team.