Order Manager Backup

[Charlotte]

Hi,

My customer has asked if there is anyway to backup his sales order history from order manager but without storing the credit card information.

I'm not overly familiar with order manager but I assume a backup can be achieved by doing an export (as per the developer software I use) but I have never idea if it backs up all the details or omits any secure or encrypted data.

Please can anyone shed any light on this for me?

Thanks
Charlotte

[Mike Hughes]

The simple answer is no, a backup will include the credit card information.

The longer answer is that you and your customer need to read up on PCI-DSS as you are no longer allowed to store credit card information without jumping through a large number of security hoops and testing which are tough and expensive.

I suggest your customer starts using a PSP to process the customer payments and deletes all credit card information from the actinic database. This can be done by overwriting the card numbers with *s and using 999 for all the Security numbers.

Mike

[Charlotte]

Thanks Mike. I thought it might be a problem. He's currently investigating PCI-DSS and that's why this has come up. I definitely think a PSP is the way forward, I'll pass on your info.

Thanks again for you prompt response.