Central Square Florist is pleased to be PCI Compliant with our Point of Sale computer system FTD Mercury. Wording from the certificate is listed below. When our customers pay with a credit card the numbers are not stored on our in-store server. Any time a staff member views an order only the last 4 numbers of the card are visible. When a returning customer is asked if they want to use a credit card that is on file only the last 4 numbers are visible to central square florist employees.
Certificate of PA-DSS Compliance
Hallock Security Labs, a PCI Payment Application Qualified Security Assessor, is pleased to present this certificate to
FLORISTS’ TRANSWORLD DELIVERY, INC.
for achieving full compliance with the PCI Payment Application Data Security Standard v1.2 as of 2/22/2010, as per an assessment conducted from 1/18/2010 to 2/22/2010.
The following application was included in the scope of this review:
FTD MERCURY X2/FTD MERCURY POINT OF SALE V10.2.2.6
Wikipedia says The Payment Card Industry Data Security Standard (PCI DSS) is a worldwide information security standard defined by the Payment Card Industry Security Standards Council. The standard was created to help payment card industry organizations that process card payments prevent credit card fraud through increased controls around data and its exposure to compromise. The standard applies to all organizations that hold, process, or exchange cardholder information from any card branded with the logo of one of the card brands.