uCollect takes the security of payment data seriously and is pleased to confirm our compliance with the Payment Card Industry Data Security Standard (PCI DSS). We have successfully completed the Self-Assessment Questionnaire (SAQ D) for Service Providers and obtained an Attestation of Compliance.
To protect our client’s data we perform ongoing security monitoring, regular external testing and annual certification update and reviews.
As part of our commitment to safeguarding cardholder data, uCollect does not store credit card numbers or other sensitive payment information on our systems. Instead, all card information is fully tokenized and managed by each client’s merchant facility. We only store an encrypted token and abstracted data necessary for processing transactions. By leveraging tokenization and best-in-class security practices, we ensure that our clients and their customers can rely on uCollect for secure payment services.