Payment data security
PCI DSS
Level 1
Assessment evidence defines the cardholder-data environment and the responsibilities covered. Relevant documentation is available through an enterprise security enquiry.
Security & Compliance
Security assurance.
A clearly defined scope.
MBME Wowpay’s security assurance includes PCI DSS Level 1 compliance and ISO/IEC 27001 certification. Supporting assessment and certificate documents define the legal entity, services, systems and locations covered.
PCI DSS
Information security management
ISO/IEC 27001
Certified
The certificate sets out the information security management system’s scope. Request the applicable certificate and supporting information for your due diligence.
Regulatory responsibilities
Regulated payment services are provided by the appropriately licensed operating entity. Technology delivery is mapped to the requirements applicable to that entity, including technology risk, outsourcing and business continuity.
Data & deployment governance
Define data ownership, permitted access, retention, hosting and encryption-key responsibilities for the deployment. Data residency and service commitments are agreed explicitly for each engagement.