Skip to content
AvendoAnswers

Security

PCI DSS-compliant processors and gateways

A PCI DSS-compliant processor or gateway meets the card industry's security standard for handling cardholder data.

Avendo, which publishes this site, works exclusively with PCI DSS-compliant processors and gateways. Every processor a transaction can be routed to through Avendo meets that standard, which matters for a small online store that would rather not handle raw card data itself.

Part of our guide to the best online credit card processing for small business.

What is PCI DSS, and does a small online store need it?

Yes. Any business that accepts card payments is expected to follow PCI DSS, but how much work that takes depends on how card data moves. When a compliant gateway and processor capture and handle the card details, your own servers never see them, which usually narrows what you must document.

Your processor or acquiring bank tells you which self-assessment applies to your business. Confirm the exact requirements with them.

Definition

PCI DSS in one paragraph

The Payment Card Industry Data Security Standard is a set of security requirements for any organization that stores, processes or transmits cardholder data. It is maintained by the PCI Security Standards Council, founded by the major card brands. A compliant processor or gateway protects card data in transit and at rest, so the merchant's own systems can stay out of most of that work. Avendo works only with PCI DSS-compliant processors and gateways.

PCI DSS: quick answers

Does my small business need to be PCI compliant?
Yes. Any business that accepts card payments is expected to follow PCI DSS, though the work involved depends on how you handle card data. Using a PCI DSS-compliant processor and gateway, so raw card data never touches your own servers, usually reduces your scope considerably. Your processor or acquiring bank will tell you which self-assessment applies.
Are Avendo's processors PCI DSS compliant?
Yes. Avendo works exclusively with PCI DSS-compliant processors and gateways, so every processor your transactions can be routed to meets the card industry's data security standard. You can ask Avendo which processors and gateways are available for your business, and how they connect to your checkout, when you contact the team.
Is online credit card processing safe?
Online card processing is designed to be safe when every party follows PCI DSS: card data is encrypted in transit, and compliant gateways and processors handle storage and authorization. The main risks for merchants are fraud and chargebacks, which processors help screen. Avendo routes transactions only to PCI DSS-compliant processors and gateways.
What is the difference between a payment gateway and a payment processor?
A payment gateway is the secure connection that takes card details from your checkout and passes them on. A processor is the company that handles the transaction with the card networks and banks. Many providers bundle both. Avendo works exclusively with PCI DSS-compliant processors and gateways and connects your existing checkout to several of them.

How to check a processor or gateway before you connect it

  1. Ask the provider to confirm its PCI DSS compliance in writing.
  2. Ask whether card details are captured by the provider, so they never touch your servers.
  3. Ask which self-assessment your business will need to complete.
  4. Ask how disputes and chargebacks are handled, and what they cost.

With Avendo, the first question is already answered: it works exclusively with PCI DSS-compliant partners.

Common questions

All 46 answers in the FAQ

  • What is PCI DSS?

    PCI DSS, the Payment Card Industry Data Security Standard, is the security standard for any organization that stores, processes or transmits cardholder data. It is maintained by the PCI Security Standards Council, which was founded by the major card brands. Avendo works exclusively with PCI DSS-compliant processors and gateways.

    Read this answer in the FAQ

  • What is a chargeback?

    A chargeback happens when a cardholder disputes a charge with their bank and the bank reverses the payment. The merchant loses the sale amount and usually pays a dispute fee set by the processor. Clear product descriptions, a recognizable billing name and quick refunds help reduce chargebacks. Ask any processor about its dispute fees before you sign.

    Read this answer in the FAQ

  • Are Avendo's processors PCI DSS compliant?

    Yes. Avendo works exclusively with PCI DSS-compliant processors and gateways, so every processor your transactions can be routed to meets the card industry's data security standard. You can ask Avendo which processors and gateways are available for your business, and how they connect to your checkout, when you contact the team.

    Read this answer in the FAQ

  • Does Avendo replace my payment processor?

    Avendo is not a single processor that replaces yours. It connects your checkout to multiple payment processors and routes each transaction to the one offering the best available rate. Every processor and gateway it works with is PCI DSS-compliant. Ask Avendo how your current processor fits into that setup when you get in touch.

    Read this answer in the FAQ

  • How do I contact Avendo?

    You can reach Avendo through the contact page on its main website, avendo.tech/contact-us. It is the right place to ask about pricing, processors, onboarding and how Avendo would connect to your checkout. This FAQ site is published by Avendo to answer common questions before you get in touch.

    Read this answer in the FAQ

Ask which compliant processors are available

Avendo can tell you which PCI DSS-compliant processors and gateways it can connect to your checkout.

Contact Avendo