- Standard
- In progress
PCI DSS: Aligned
Self-assessed by IdeaScore. Not certified by an outside body.
The card industry's security standard. Questionnaire A applies when card details are taken only on the payment provider's own page.
In place
- Card payments in other currencies use Stripe's own checkout page. Card details never reach our servers.
- Our pages load no payment scripts. Our content security policy allows scripts only from our own site and Cloudflare's bot check.
Work in progress
- A content security policy without inline scripts. Today the policy still allows inline scripts.
- Card payments in Indian rupees for IdeaScore AI credits are not live yet. They will also use a page hosted by the payment provider.
- Complete Questionnaire A and sign the Attestation of Compliance.
- Keep Razorpay's and Stripe's own attestations on file.
Evidence
- Self-Assessment Questionnaire ABeing prepared
- Attestation of ComplianceBeing prepared
Limits
- We do not store, process or send card numbers. The duties for card data itself rest with Stripe and Razorpay.
Bring Your Questions to a Product Specialist
A 30-minute walkthrough of the Trust Centre, the Data and Privacy card and the Decision Trail, with your committee's questions.