Is Commerce7 PCI Compliant?

Yes - Commerce7 is PCI compliant.  We are PCI compliant Service Provider Level 2 and can provider our Attestation of Compliance document on request.  Commerce7 undergoes a quarterly security scan and has always passed the security scan.

Commerce7 does not store credit card data.  Instead credit cards are encrypted and tokenized at a payment gateway and Commerce7 stores that token.  

Commerce7 takes data security very seriously.  We log all API calls, we store the last 20 edits of all customers records, we log all deleted objects.  Our security is not just at a UI level but is at an API level.  

For additional security questions please reach out to us.