LOVE

Jotform is PCI DSS Service Provider Level I Compliant

0 1 minute read

Jotform is proud to announce we’re Payment Card Industry Data Security Standard (PCI DSS) Service Provider Level I certified – the highest level of security possible for a business that collects payments from, and integrates with, credit cards. In fact, Jotform has been PCI DSS compliant at the highest level dating back to 2018, and continuing to pass this standard with no exceptions is something we take pride in.

Maybe you are interested

We’re proud to be the first, and the only online form building platform to provide the highest level of data security possible to our users. Here’s a short summary of what that means.

You see: Jotform is PCI DSS Service Provider Level I Compliant

What is PCI compliance?

In a nutshell, PCI compliance is the security standard set by the major global credit card companies, including American Express, Discover, JCB, MasterCard, and Visa.

Why is Jotform PCI compliant?

Jotform had previously been certified as PCI DSS Service Provider Level 2, but as the volume of integrated payments increased, it became a necessary step to upgrade to the highest level of security. Companies that hit a transaction threshold are ultimately held to higher security standards, and rightly so.

Does Jotform process credit card information?

We don’t. Instead, we trust our terrific payment integration partners to do the processing for us. However, we still wanted to provide additional reassurance that we’re doing the most we possibly can to ensure safe, secure payments. And because so many users take advantage of our payment integrations (more than 20 now!), it was a necessary step to achieve the next level of security certification.

Why is Level One significant?

Jotform has been Level II certified for a while now, but the new designation means that we’ve passed several tests required for certification. This includes a penetration test, internal scan, and an annual report on compliance by a third party security assessor, among other requirements.

Our PCI Certificate of Compliance validity start date is Sep. 15, 2018.