What is PCI compliance?

PCI Compliance refers to adherence to the Payment Card Industry Data Security Standard (PCI DSS), a set of security standards designed to protect cardholder data and prevent fraud. It applies to any business that processes, stores, or transmits credit card information.

As a requirement by all major credit card brands, PCI compliance ensures secure handling of cardholder data. You’ll complete your compliance process within the Worldline PCI portal.

Before you get started

Please be sure to add the following emails to your safe senders list: 

• [email protected]
• [email protected]
  

You will work within the Worldline PCI portal to complete two steps: 

1. Completing your business profile 
2. Completing the PCI questionnaire  

Both steps must be completed to become compliant.  

For assistance with the PCI questionnaire, please contact the PCI Help Desk. They are available to guide merchants through the process and answer any questions you may have.

• via email: [email protected]
• by phone - click the phone icon at the top of the screen or call 1-833-883-3338

Additionally, attached you can find samples for 2 different compliant Payment Guard business profiles with questions answered.

Completing your business profile

We have included some steps for how to answer the business profile questions. This will ensure that you get the correct PCI questionnaire. To log in, go to the Worldline PCI portal and enter your credentials. If it is your first time logging in, you will need to register.

1. Once you have logged in, click into your business profile to begin. You should see the page below to get started. We recommend you watch the video, and once done, click on Start business profile. This profile is only related to your payments processed through this Worldline account.
2. On the next page, confirm your merchant account numbers. Click Next.
3. You will then be asked how you accept payment. Most businesses will fall under the “I accept payments through multiple channels, through a website, or over the telephone / Internet” category. These instructions apply to those businesses that are in that category. Click Next.
4. For the next prompt, “Choose an assessment method”, select “Guide Me”. Click Next.
5. For the next question, “How do you accept payment cards?” Please use the tool tip (little green question mark) if you need further information on third-party hosting. Select your answer. Click Next.
6. For the next prompt, “Pay by Link,” you will be asked a question relating to payments via a Pay by Link solution. The answer is likely Yes. Click Next.
7. For the next prompt, “Your Pay By Link solution provider,” please provide the name of your Pay By Link solution provider. For example, if you collect registration fees for a daycare, gym or camp, or if you accept online orders for a restaurant, your provider is the software company that provides your registration or order tool. If you use Worldline’s Checkout link builder, your provider is Worldline. Click Next.
8. For the next prompt, “Your Pay By Link solution provider,” you will be asked if your provider is PCI DSS compliant. The answer is likely Yes. Click Next.
9. For the next prompt, “Pay by Link Only,” you will be asked if Pay by Link is the only method your customers use to pay by card. The answer is likely Yes. Click Next.
10. For the next prompt, “Other uses of card numbers,” you will be asked two questions related to the sending, storing, and receiving of card numbers. The answers are likely No and No. Click Next.
11. For the next prompt, “Your company policy for information security,” you will be asked about your company’s policy for information security. You should only choose the first or second option. If you need a policy, click the Download link to be provided one. Click Next.
12. For the next prompt, “A summary of how and where you handled card payment,” you will provide information on where and how you handle card payments. Fill in each field with the required information. Click Next.
13. You have now completed your business profile. You will still need to complete the security assessment.
    
14. Once you have successfully completed the security assessment, the next prompt will present you with a Compliance badge with your expiry date.