Are full card details from PSP downloaded to Actinic desktop

[JGN]

Does the PSP (Actinic Payments ) send full card details to actinic on the desktop? I ask this because I have been able to use "existing card" when using the MOTO facility to place orders. This suggests that the full card details are sent to and stored on the desktop. I only have Actinic Payments ecommerce and Actinic MOTO set up.

To conform with PCI-DSS SAQ C The merchant has to confirm that he does not store cardholder data in electronic format.

If the full details are being sent to the desktop, albeit encrypted, then a merchant using Actinic would not conform with the above standard.

Can someone at Actinic please clarify this as I'm filling in the Security Metrics form and want to make sure I conform

John

[guccij]

No it does not download any card details. The "pay using existing card" facility is via the AP secure server.

[Steve G Griggs]

Thanks Jules that's handy to know in case we're ever asked.