Engaging Networks Earns Third-Party Validation of PCI DSS Compliance
Security isn’t just a box that we check. It’s part of our principles and our mission. We are proud to announce that Engaging Networks has achieved PCI DSS v4.0.1 compliance.
This official third-party validation of compliance with the Payment Card Industry Data Security Standard (PCI DSS) v. 4.0.1, conducted by the qualified security assessors at ControlCase, reflects our unwavering commitment to the highest security standards and to protecting your donors’ fundraising data.
“PCI DSS compliance continues to be a heavy lift, and Engaging Networks is proud of the work that we do to secure our platform,” Tiffany Ramzy, Head of Compliance and Risk at Engaging Networks, said. “But we are also grateful to our partners and our clients, who each play a role in the shared responsibility around PCI Compliance. Our accredited partners help clients create PCI-compliant pages. Our managed security provider, Very Good Security (VGS) protects sensitive cardholder data by tokenizing and vaulting the data. And our clients practice good data security and data hygiene for their donation pages. So, congratulations all around for the PCI DSS success of the Engaging Networks fundraising ecosystem.”
PCI Compliance at Engaging Networks
All donation pages run through our platform must be compliant with PCI DSS regulations. To check compliance, each donation page is scanned by an Approved Scanning Vendor (ASV). ASVs scan for potential risks and vulnerabilities on internet‑facing systems, such as web servers that host or connect to payment pages.
An ASV scan is required any time a page redirects donors to a payment processor or features an embedded payment form on the page itself.
These scans are completed every quarter. If a donation page that’s run on Engaging Networks fails its scan and that failure can’t be resolved, we disable it. We’re serious about protecting payment security and giving our clients a platform they can trust — so donors can trust that their donations and their data are safe when they make a gift.
Engaging Networks Payment Integrations
Part of our focus on cardholder safety includes securely integrating with a variety of PCI-compliant payment options. We support payment options like:
- Stripe
- PayPal Express Checkout
- PayPal Payments Pro
- PayPal Payflow Pro
- Moneris
- Vantiv
- iATS
- Paysafe
- Worldpay
- Blackbaud Integrated Payments
Our integrations give your organization the flexibility to use the payment method that you and your donors trust most.
Why PCI DSS Compliance Matters
PCI DSS standards help protect credit card information by mandating secure ways of storing, processing, and transmitting payment data. PCI DSS rules offer a baseline to follow to avoid exposing sensitive financial information to fraudulent attacks. These rules are updated regularly, and the most recent version is PCI DSS 4.0.1.
