PCI Compliant Ecommerce Hosting

What is PCI?

The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that ALL companies that process, store or transmit credit card information maintain a secure environment. Essentially any merchant that has a Merchant ID (MID)

All merchants, whether small or large, need to be PCI compliant. The payment brands have collectively adopted PCI DSS as the requirement for organizations that process, store or transmit payment cardholder data. PCI SSC is responsible for managing the security standards while each individual payment brand is responsible for managing and enforcing compliance to these standards.

Am I PCI compliant if I have an SSL certificate?

No. SSL certificates do not secure a Web server from malicious attacks or intrusions. High Assurance Enterprise SSL Certificates provide the first tier of customer security and reassurance, but there are other steps to achieve PCI Compliance.

What are the penalties for noncompliance?

The payment brands may, at their discretion, fine an acquiring bank $5,000 to $100,000 per month for PCI compliance violations. The banks will most likely pass this fine on downstream till it eventually hits the merchant. Furthermore, the bank will also most likely either terminate your relationship or increase transaction fees. Penalties are not openly discussed nor widely publicized, but they can catastrophic to a small business.
It is important to be familiar with your merchant account agreement, which should outline your exposure.

Onlyhosting offers four types of PCI Compliant ecommerce hosting packages which have more than enough resources and disk space to handle most ecommerce websites.

Onlyhosting uses Xen Server Virtualization with the Xen Hypervisor which is the fastest and most secure infrastructure virtualization solution available today for our VPS PCI compliant ecommerce hosting options.

The four ecommerce hosting options are dedicated VPS' hardened to PCI standards.

Our monthly rates also include PCI scans to maintain compliancy, fully featured cPanel control panel and our basic email with webmail. We don't charge extra for this as we feel it's within our "Hosting with Integrity" pledge.