EvolutionX in independently audited and certified for credit card payment processing. Our certification as a PCI Level 1 Certified Service Provider is the highest available category. We certify yearly through a PCI v4.0.1 audit process to ensure we maintain the highest standards for credit card processing security.
To obtain a copy of our PCI Attestation of Compliance (AOC) and PCI Shared Responsibility Demarcation Document, navigate to the Security & Compliance section under Store Settings and download a copy. Read more about PCI compliance here.
Frequently Asked Questions (FAQ)
What Should a Distributor Do to Document PCI Compliance of their EvolutionX Store?
It's easy to document compliance with PCI requirements for all payments taken on your EvolutionX store. A yearly check can keep this up to date.
Download the EvolutionX PCI AOC (attestation of compliance) from the EvolutionX Admin by going to the Security and Compliance page of the store settings. Do this yearly.
Request the PCI AOC (attestation of compliance) from your Payment Gateway provider (Stripe, Net1, Opao, etc.). Do this yearly.
Do I need to do a PCI Vulnerability Scan?
No, as part of our PCI compliance, EvolutionX already does quarterly scans and documents them for our PCI auditors. There is no need for you to perform a similar scan. Simply download the EvolutionX PCI AOC and this shows your store is compliant. Note that if you do perform a PCI scan you must use a provider which supports the fully qualified domain name of your store, such as https://www.mystore.com, and not IP based scanning.