Compass has achieved Level One compliance with the Payment Card Industry Data Security Standard (PCI DSS) – a key indicator of our commitment to ensuring the data of those who use Compass is kept secure.
Our team works every day to maximise the security and protection of our customers’ data. PCI DSS is a key part of our broader information security strategy, so we’re extremely proud to have achieved full Level One compliance.
The assessment process involved a rigorous five month review of the company’s information security posture, and included not only interrogation of our governance approach, but also penetration testing of our payment platform software by an independent security firm.
PCI DSS compliance refers to a comprehensive set of security standards, requiring that any organisation that stores, processes, or transmits customer credit card information maintains strict controls and a secure environment. In order to achieve compliance, an organisation must demonstrate that they have implemented a number of mandated objectives, relating to technology design, network and physical data security.
For example, using our new Canteen module, parents can now order and pay for school lunches through Compass. Similarly, we will be introducing the ability for parents to pay for events from the Compass app. Processing these payments, and indeed, offering great functionality like the ability for users to save their credit card details within our app, requires PCI DSS compliance.
Just as schools have a diverse range of regulation requirements they must meet, good providers to schools should endeavour to ensure they too are fully compliant.
You can find more information about what it means to be on the Visa Global Registry here. The Visa Global Registry of Service Providers explains the importance of being on the registry:
The platform is scalable with extensive configuration options allowing you to tailor the platform to suit your needs. With adherence to strict safety and security standards, the platform supports learning outcomes, while keeping student data safe and secure.
