The Payment Card Industry Data Security Standard (PCI DSS) is a compulsory information security standard for businesses that store, process, or transmit payment card data, which is managed by five international payment organisations, namely Visa, MasterCard, American Express, Discover, and JCB. The certificate is the highest level of service provider established by the PCI Security Standards Council.

PCI DSS 3.2.1 comprises a set of strict requirements including multi-factor authentication, data encryption in line with security standards, and regular compliance and periodic reviews across the whole organisation.

Realising the importance of payment security, as well as understanding customers' concerns about security issues, VNPAY has always made efforts to improve the security standards for its services in line with the international security standard PCI-DSS Level 1.

To achieve this certificate, VNPAY’s services have to comply with 12 requirements covering six categories, including building and maintaining a secure network and systems; protecting cardholder data; maintaining a vulnerability management program; implementing strong access control measures; regularly monitoring and testing networks; and maintaining an information security policy.

VNPAY has passed nearly 300 detailed requirements on information security and data management processes.

Customers make VNPAY-QR payments at shopping outlets

In 2020, VNPAY Payment Gateway has been certified with the PCI-DSS version 3.2.1 Level 1. Over the past two years, VNPAY continued to develop its site with the most advanced technology based on the Cisco ACI platform, meeting 12 strict requirements for the system such as information security, data processing procedure, computer network structure to ensure thorough data transmitting, and minimisation of the risk of information theft.

The VNPAY Payment Gateway has been implemented at over 30 banks and 200,000 VNPAY-QR code accepted payment points with TLS 1.2 specification, which has strong encryption algorithms.

The VNPAY-POS service, which is based on SmartPOS devices, is a comprehensive payment solution for businesses to deploy different payment methods for customers easily. SmartPOS devices have built-in features including card payment, VNPAY-QR code payment, invoice printing, and barcode scanning, thereby making payment flexible and fast.

The device is also integrated with payment software, sales management software, and businesses’ own software to speed up the process of information synchronisation and control. At the same time, VNPAY-POS can create a customised solution to suit the specific needs of each product line.

VNPAY-POS payment solutions developed by VNPAY on the Smart-POS payment device

VNPAY Cloud offers cloud computing and AI services for large enterprises, financial partners, banks, and fintechs.

Following the future development trend of cloud models, VNPAY is focusing on developing its cloud services as software-as-a-service products. Thus, businesses can easily reach their customers, expand the digital ecosystem, and meet rapidly growing needs.

At the ceremony to receive the certificate, Nguyen Huu Phuc, deputy general director of VNPAY, said that VNPAY places a top priority on security and information safety during its journey of developing services. Therefore, VNPAY would always strive to ensure customer transactions are carried out in a digital environment with the highest level of security, reliability, and safety.

Mr. Nguyen Huu Phuc - Deputy General Director of VNPAY (fourth from left) received the highest level international security certificate for 3 services from Control Case representative.

“We have spent a lot of resources and time developing services that meet international security standards. PCI DSS certificate is the ground for customers to trust and use VNPAY's solutions. At the same time, the certification is a motivation for us to continue our efforts in product development. We aim to ensure the highest security by limiting security holes, lowering the risk of information theft and enhancing data protection. This is also a great opportunity for us to expand cooperation opportunities with international organisations,” Phuc added.