What is PCI DSS? The rules for handling card details
By SendPay Business · · 2 min read
- 1Your card appears in your app
- 2Tap it to pay in a shop
- 3See every payment as it happens
PCI DSS, the Payment Card Industry Data Security Standard, is a set of security rules for any business that takes, stores or passes on card details. It's run by the PCI Security Standards Council, which was set up by the major card schemes.
Who it applies to
Any business that accepts card payments is expected to follow it, from a market stall to a large retailer. The work involved depends on how many card payments you take and how card details reach your systems.
What it asks for
0 of 4 done
Tick each step as you do it, so you can see what is left.
Try it
Name your platform and watch it come to life
Type a name, tap a colour and pick what it does. The phone changes as you go.
Colour
What it does
Design and preview your whole platform free, then launch when you are ready.
How small businesses show compliance
Most small businesses fill in a Self-Assessment Questionnaire (SAQ) each year, often through their payment provider. The simplest questionnaires apply when card details never touch your own systems.
Keeping card numbers off your systems
Using a hosted payment page or payment links means the customer types their card details on the provider's page, not yours. That can greatly reduce how much of PCI DSS falls on you. Never write down card numbers taken over the phone.
Where SendPay fits
SendPay platforms include payment links and invoicing under your own brand, powered by licensed partners, so customers pay on a secure page rather than reading card numbers to you. You can preview your platform before you launch.
How it works
Your own money app- 1Name it and pick your colours
- 2Choose what it does
- 3Launch when you are ready
Why sign up
Create your free SendPay account
It's all about creating your own financial platform with ease. Start with a free account today.
- 🪪A free business accountOpen it in about a minute with your business name, email, password and mobile. No card and no documents to start.
- 💳Get paid from day oneTake card payments, and share your own payment link and invoices so customers pay in a click.
- 🌐A free business websiteFree to build, free to publish and free to keep, with unlimited visits.
- 🚀Your own financial platformDesign and preview your whole platform free, then launch when you are ready.
SendPay Business is a technology company, not a bank. Accounts, cards and payments are powered by licensed partners.
Questions people ask
What is card tokenisation?
How card numbers are replaced with safe tokens.
What is card tokenisation? →Virtual terminal or payment link?
Which keeps card numbers out of your hands.
Virtual terminal vs payment links →Read next
Spotted a mistake or something out of date? and we'll fix it. How our guides are made
This guide is general information, not legal or financial advice. SendPay Business is a technology company, not a bank, and does not take deposits; regulated services on the platforms are provided by licensed partners. Other companies named in this guide are reference points only and are not affiliated with SendPay Business.