Taking card payments online is a must for any modern Kiwi business, but it comes with a catch – PCI DSS compliance. If you collect, process, or store credit card details, you have to meet strict global security standards to make sure that cardholder data is protected.
If the thought of auditing your servers and security systems sounds like a headache, there’s an easier way. By using our FuturePay tokenisation service, you can accept recurring payments while keeping your pci compliance workload to an absolute minimum.
Here’s straight up how tokenisation cuts through the red tape.
The problem with storing raw card numbers
To run a subscription service, a gym, or a SaaS platform, you need to charge your customers on a regular schedule. But storing raw credit card numbers on your own database is a massive security risk.
If raw card numbers touch your local environment, you fall into a high-risk security category. This means you have to fill out extremely long, technical self-assessment questionnaires and regularly run expensive vulnerability scans. For most small-to-medium Kiwi businesses, the time and cost required to manage this level of security just don’t make sense.
Enter FuturePay tokenisation
Instead of storing real card details on your servers, our payment gateway nz replaces them with a secure placeholder – a token.
When your customer makes their first online payment or sets up their regular billing, they enter their details into a secure form hosted by us. We securely encrypt the card details and save them inside our Level 1 PCI DSS compliant vault.
We then send a unique alphanumeric string – a token – back to your database. This token is completely useless to hackers because it can’t be decoded to reveal the real card number, but it allows your system to charge the card whenever a payment is due.
Downgrading your PCI compliance scope
Because the raw card data is securely stored in our vault, it never touches your local servers. This keeps your business safe and drastically reduces your compliance workload.
In the world of security audits, this is called descaling your compliance scope. Instead of auditing your entire database and server setup, you can often qualify for a much simpler, streamlined assessment, such as the SAQ A.
Rather than spending days filling out technical paperwork, you can tick off your annual compliance in a fraction of the time.
Effortless batch processing for accounts teams
Once your customer cards are safely tokenised, you can easily manage high volumes of regular payments. If you need to run dozens or hundreds of subscription charges on the first of the month, doing them manually is a waste of billable hours.
Our batch processing tools let your accounts team upload a single file of tokenised transactions. We can securely process over 30 transactions a second, meaning you get your money sorted fast without stressing about server load or data leaks.
Setting up secure, automated billing doesn’t have to be complicated. Our local support team is based right here in New Zealand, operating in your time zone to help you get your integrations running smoothly.
