To help merchants manage the risk of a breach, and the time and cost of PCI DSS compliance, PCI-validated point-to-point encryption (P2PE) provides the highest tier of payment security and removes the merchant’s POS and network 100% out of scope for compliance.
Only solutions listed on the PCI Website have met the standards required to offer these merchant benefits: https://www.pcisecuritystandards.org/approved_companies_providers/validated_p2pe_solutions.php
P2PE utilizes secure Point-of-Interaction hardware that converts credit card information into encrypted files from the moment the card is swiped or entered. The encrypted files are decrypted inside a hardware security module that protects personally identifiable information and original card numbers from all parties other than the credit card processor.
Only PCI-Validated P2PE reduces PCI DSS compliance requirements for merchants by removing the POS and network out of scope. This reduces the costs to operate a secure environment and significantly reduces the amount of controls the merchant must adopt to ensure PCI compliance.
The stakes are high, and there is a lot of myths and misinformation creating fear, uncertainty and doubt in the market. Only PCI-Validated point-to-point encryption can deliver true merchant benefits, and only FreedomPay delivers EMV and NFC support out of the box, making a single capital investment deliver a lot more value to the merchant.
To earn PCI validation, FreedomPay worked with Ingenico and ScanSource to develop a comprehensive security envelope including the hardware, the software and the chain of custody of the devices. This gives our partners the assurance that their devices have not been tampered with or handled by unauthorized personnel.
It took a lot of planning, collaboration and testing to make this solution a reality. Merchants can now feel secure that their payments data is protected, and their compliance burden has been relieved.