info@venuepay.dk
+45 89 93 67 67
en

PCI DSS

At Venue Pay, safeguarding payment data is our top priority. All communication between our systems, acquirers, and end-users is encrypted using SSL/TLS. This ensures that sensitive information remains fully protected whenever a transaction is carried out.

PCI Compliance

Venue Pay is certified under PCI DSS Level 1 – the highest international standard for handling cardholder data. This certification includes:

  • Annual audits performed by independent security assessors "Qualified Security Assessor" (QSA)

  • Regular vulnerability scans of our infrastructure "Approved Scan Vendor" (ASV)

  • Strict policies for how data is processed and stored

With PCI certification, both merchants and customers benefit from stronger protection against fraud, and businesses gain an extra layer of trust by partnering with a certified provider.

Data Retention

To comply with PCI requirements, card data is only stored for a limited period depending on transaction type:

  • Cancel: 90 dage

  • Rejected: 90 dage

  • Subscription: 365 dage

  • Refund: 365 dage

  • Capture: 365 dage

  • Authorize: 5 år

All data is automatically deleted after the defined retention period.

PCI Hosting

For merchants who need maximum flexibility, Venue Pay offers PCI-hosted payment windows. This allows you to design the checkout flow exactly as you want — while we handle the compliance requirements in our secure, PCI-certified environment.

Key benefits:

  • Full design freedom without the burden of PCI certification

  • A safe, hosted environment that prevents any direct exposure to card data

  • Seamless redirect of customers back to your webshop after payment approval

Availability

Due to the complexity of PCI hosting, this option is reserved for merchants processing at least 10,000 transactions per month. Smaller merchants can take advantage of our branded, ready-to-use payment window.

Implementation

You create and design your payment window in your own environment. Once complete, our team reviews the files for security and deploys them in our PCI-hosted setup. This ensures compliance, safety, and reliability at every step.