This website uses cookies to ensure you get the best experience on our website. Learn more

Contact Us |
Home |Solutions |Security

Security

Optomany has security in its DNA and protecting payment data is front and centre of everything we do. We have developed solutions that safeguard customer data across the payment chain, reducing merchants’ ever increasing compliance burden enabling them to concentrate on their core business. We ensure that everything we do not only meets, but exceeds industry standards.

Consumers are increasingly aware of the consequences if their personal data is stolen. This is particularly well understood in relation to payments. Each time they buy, they put their trust in you to protect their details and, in the event that something should go wrong, they will hold you to account.

But protecting payments data is a full-time business. Threats are constantly evolving and payment security cannot be taken for granted. Partnering with Optomany, you can be assured that you are making a choice that will protect your business and your customers’ data against the threats of today and tomorrow.

Our industry leading payment solutions ensure payment data is encrypted from the outset, reducing the risk of fraud and dramatically reducing your compliance overheads leaving you to focus on growing your business.

Our industry leading payment solutions ensure payment data is encrypted from the outset, reducing the risk of fraud and dramatically reducing your compliance overheads leaving you to focus on growing your business.

Security is the touchstone against which we measure everything we do. Our axept platform is PCI DSS certified and our solution set was one of the world’s first to be P2PE v2 approved. So read on to find out how Optomany can help ensure your security and ongoing compliance is just business as usual.

The Payment Card Industry Data Security Standard is a global standard that applies to all parties involved in payment card processing—including merchants, processors, acquirers, card issuers, and service providers.

At Optomany, we have incorporated the PCI DSS requirements not only into our solutions but also into our wider security framework and business as usual processes. From our first day in business, we have achieved PCI DSS Level 1 certification, the highest standard possible. This standard has been maintained year on year with the annual certification being assessed by an independent third party qualified security assessor (QSA).

To validate our status as a service provider we are required to register annually with both Visa and MasterCard and you can view our listings here:
https://www.visaeurope.com/receiving-payments/security/downloads-and-resources
https://www.mastercard.us/en-us/merchants/safety-security/security-recommendations/service-providers-need-to-know.html

Exemplifying Optomany’s on-going commitment to payment security, we were the first company globally to achieve P2PE v2 solution certification using a P2Pe v2 application.

https://www.pcisecuritystandards.org/assessors_and_solutions/point_to_point_encryption_solutions
https://www.pcisecuritystandards.org/assessors_and_solutions/point_to_point_encryption_applications

Adopting our axept® P2PE solution enables merchants to simply implement a complete payment acceptance system that complies with the latest global payment security standards. The axept® solution and managed service incorporates full chain of custody and lifecycle tracking with a cradle to grave history of each payment device’s every movement, including through the swap-out and break-fix processes. It reduces where and how PCI DSS requirements apply to merchants, dramatically simplifying compliance efforts and costs by rendering card data unreadable by unauthorised parties.

Are you PCI DSS certified?

Optomany are a level 1 PCI DSS certified service provider. We are listed with both Visa and MasterCard
https://www.visaeurope.com/receiving-payments/security/downloads-and-resources
https://www.mastercard.us/en-us/merchants/safety-security/security-recommendations/service-providers-need-to-know.html

Do you have a PCI certificate?

As a payment service provider we have an ‘Attestation on Compliance’ – which is issued at the end of our annual PCI DSS assessment.
If you would like a copy of our AOC please contact us via the ‘Contact Us’ page

Are your solutions P2PE approved?

The Optomany axept® solution is P2PE v2 approved and our listing on the PCI SSC website can be viewed here
https://www.pcisecuritystandards.org/assessors_and_solutions/point_to_point_encryption_solutions
https://www.pcisecuritystandards.org/assessors_and_solutions/point_to_point_encryption_applications

Do you have a P2PE PIM?

As part of the axept® P2PE v2 solution approval, Optomany have delivered a PIM ‘P2PE Implementation Manual’. If you would like a copy please contact us via the ‘Contact Us’ page

If Optomany are PCI DSS certified do I still need to be PCI DSS certified?

You will still have a requirement to be PCI DSS certified yourselves. Your acquirer will be able to advise to which level. A great resource for further information can be found here:
https://www.pcisecuritystandards.org/