Summary

After you sign up through Gingr to accept credit cards, our parent processor, CardConnect, sends you a notice. You must complete your PCI compliance questionnaire and scan. As the business owner, this is your responsibility.

PCI stands for Payment Card Industry Data Security Standard (PCI-DSS). It is a guideline for how you accept, send, and store customer credit card information. CardConnect makes it fairly easy to stay compliant through secure tokenization of customer card data. You never hold your customers' card information. Gingr encrypts every transaction at the first swipe of the card. Gingr's remote databases and your local computer do not store card information. CardConnect's secure, Level I PCI-compliant data centers store all card information. When Gingr calls up that information so you can keep cards on file, Gingr gets a token back. The token stands for the customer's information but does not contain the card details.

Plan on about 15 minutes each year to avoid a monthly non-compliance fee. If you follow a few basic procedures, you can stay compliant.

Before You Begin

You can find the Trustwave online questionnaire at https://cardpointe.managepci.com/.

For PCI compliance support, contact SecureTrust Support (a division of TrustWave). They handle PCI compliance.

• PCI Support Phone: 1-877-257-0239
• PCI Support Email: ccsupport@securetrust.com

Being compliant saves you money. Non-compliance costs higher fees.

Gingr cannot enforce your compliance, and cannot ensure it. You must put the questionnaire answers into practice to be compliant.

Gingr is not allowed to help you answer the questions. You can use the SAQ (self assessment questionnaire) guide as a reference.

Make sure you are in the right version of the questionnaire, SAQ type C-VT. This makes the SAQ short and does not need a scan, because you process through the CardPointe virtual terminal, which is already compliant. You may be able to select the SAQ type C-VT version by hand. If not, contact the CardConnect PCI Support team. They can also answer questions about completing PCI compliance.

Steps

1. Go to CardConnect MerchantCenter to start: https://gingr.cardconnect.com/account/login#/login.

   

   If you do not have a MerchantCenter account, sign up now. It has useful account information, such as transaction reports, on-demand statements, equipment, and documentation.

2. After you log in to MerchantCenter, select My Account in the top menu bar.

   

   Your PCI status shows at the top of the page.

   

3. Copy your Merchant ID. You need it soon. Select the circled "Learn how to get compliant" link to go to the CardConnect/Trustwave Portal. You can also go straight to https://cardpointe.managepci.com/.
4. If this is your first time on the site, select Get Started. After you register, use the Login link to check your account status.

Related Articles

• Get Started with CardConnect Topic Outline