Payment security at every layer
Card data is among the most sensitive information a business handles. Here's how PayJunction helps keep it — and your customers — protected.
How we protect card data
Tokenization
Card numbers are replaced with tokens that are useless if intercepted.
Encryption in transit
All traffic uses modern TLS. Unencrypted connections are refused.
Encryption at rest
Sensitive data is encrypted with keys managed separately from data.
Hosted fields
Card inputs are served from isolated frames so raw data never reaches your servers.
Access controls
Role-based permissions and two-factor authentication for dashboard users.
Monitoring
Continuous logging and alerting on suspicious activity.
Reducing your PCI DSS scope
Any business that accepts cards must comply with the Payment Card Industry Data Security Standard (PCI DSS). Using hosted checkout or hosted payment fields means card data is collected by PayJunction rather than your systems, which can greatly simplify your own compliance obligations — often to a short self-assessment questionnaire. See our compliance page for details.
Your part in keeping payments secure
- Enable two-factor authentication for all dashboard users
- Keep secret API keys on your server — never in client code
- Verify webhook signatures before acting on events
- Use HTTPS across your entire website
- Review user access regularly and remove former staff
Report a vulnerability
If you believe you've found a security issue, please email [email protected]. We appreciate responsible disclosure.
Frequently asked questions
What is tokenization?
Tokenization replaces a card number with a random token. The token can be used to charge the card through PayJunction but has no value if stolen.
Does using hosted fields make me PCI compliant?
Hosted fields reduce your scope, but every merchant still has PCI responsibilities, typically completing an annual self-assessment questionnaire.
Is two-factor authentication available?
Yes. Two-factor authentication is available for all dashboard users and strongly recommended.
Related
Ready to accept payments with PayJunction?
Tell us about your business and we'll prepare a quote and a setup plan.
Contact sales