Security

SafeMerchant Payment Solutions, Inc. is founded on the 3 and 3 thirds principal.
The first 3 principals are:

Protect cardholder information

There are many payment gateways that boast PCI compliance as a necessity but SafeMerchant was constructed from the ground up using the PCI Standard as our blueprint. Our corporate manual (yes, we have one) is entirely based around the tenets of Data Security.

Educate Merchants and Consumers

The principals of SafeMerchant have an extensive history rooted in the web hosting industry. The typical online merchant is unaware of the challenge that they face when selling over the Internet yet their websites are being challenged by thieves and hackers moment by moment. There are misconceptions about what constitutes a secure website. SafeMerchant is committed to raising the level of awareness of consumers and especially Merchants.

Focus on the right technology

Technology is meant to serve us not the other way around. Our goal as a company is to build upon our secure infrastructure and never be satisfied that we've done enough. We will offer the appropriate product to customers according to their unique security profile. We will not offer products that can be misused or misappropriated.

So what is the 3/thirds principal?

Live up to our own expectations

You can identify a SafeMerchant by the SafeMerchant Seal® on their website or by the Powered By SafeMerchant Logo on the payment page that you were redirected to. SafeMerchants have contractually agreed to conduct business in a safe manner but how can you be assured that SafeMerchant Payment Solutions is conducting business in a Safe manner?

A security standard in itself is no assurance that your information is secure. The sorry truth about many well known security breeches is that they were devised or caused by employees of PCI compliant companies.

In addition to employee background and credit history checks, SafeMerchant self imposes the following:

Yearly 3rd party on-site security audits (As required by PCI)
Monthly 3rd party security assessments by unique Vendor
Monthly vulnerability scans by unique Vendor
Internal compliance department