Skip to main content
Explanation

UltraCart PCI Compliance

Introduction​

PCI compliance is an important part of your online store, and requires that you and your vendors, such as UltraCart and your payment gateway, work together to make sure that each step in the payment process is performed with the appropriate controls and safeguards. To this end, your merchant account provider/gateway may require you to submit proof of PCI Compliance. The following should help you deal with this requirement.

warning

PCI compliance is a complex process that has many parts. While we strive to provide the most accurate and timely information possible, we cannot guarantee that the information we provide is the most recent and accurate at the time you access this page. Therefore, this information is presented AS-IS. You should contact your legal counsel or a qualified PCI consulting organization if you are unsure of any of the requirements or guidelines.

PCI Level 1 Certification​

UltraCart is a PCI level 1 certified service provider. You can read more about our compliance efforts and status at http://www.ultracart.com/resources/pci-compliance/

Verification with VISA / MasterCard​

Your payment gateway or merchant account provider may require proof of UltraCart's PCI Level 1 Compliance. You can search the list of such vendors at the following web sites.

Self Assessment Questionnaire​

If you are categorized as a Level 2 or greater merchant by either Visa or MasterCard (or both), then you are required to complete a PCI Self Assessment Questionnaire (SAQ), as well as possess a Certificate of Compliance provided by a PCI Approved Scanning Vendor.

Every SAQ, along with the SAQ Instructions and Guidelines document that tells you which SAQ applies to your environment, is published free of charge in the PCI Security Standards Council document library:

https://www.pcisecuritystandards.org/document_library/

Filter the library by SAQ to list the questionnaires. Read the SAQ Instructions and Guidelines first to confirm the eligibility criteria you meet, then download the matching SAQ. The PCI SSC Merchant Resources page has additional background on the self-assessment process.

Third Party Scanning​

UltraCart utilizes the services of a PCI Approved Scanning Vendor (ASV) to perform quarterly external vulnerability scans of our platform, as required by PCI DSS.

info

If your merchant account provider/gateway requires that you have a Certificate of Compliance that includes your company name rather than UltraCart's, you will need to purchase PCI scanning services of your own. You can view the list of Approved Scanning Vendors at the PCI website.

Was this page helpful?