PCI Requirements for American Assisted Living Nurses Association
At American Assisted Living Nurses Association (alnursing.org), we are committed to protecting the personal and payment information of our members. To ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS), we follow best practices and partner with secure payment processors to safeguard cardholder data.
- Use of Secure Payment Processor
We utilize Stripe as our payment processor. Stripe is a PCI Level 1 Service Provider, the highest level of PCI compliance. All cardholder data is transmitted securely to Stripe via encryption and tokenization, ensuring it is never stored or processed directly on our servers.
- Encrypted Data Transmission
All transactions are conducted over encrypted connections using TLS (Transport Layer Security). This protects cardholder data during transmission and prevents unauthorized access.
- Data Handling Policies
- No Card Storage: We do not store credit or debit card information on our servers. All payment information is securely handled by Stripe, which adheres to PCI DSS standards.
- Limited Access: Access to payment data is restricted to authorized personnel who require it for legitimate business purposes.
- Secure Storage of Sensitive Data: Any non-payment sensitive information provided during sign-up (e.g., email or name) is stored securely on our systems.
- Regular Monitoring and Testing
- We conduct periodic vulnerability assessments on our website to identify and mitigate potential security risks.
- Our systems are regularly updated to ensure they are protected against the latest security threats.
- Customer Responsibility
We encourage our members to follow best practices for online transactions, such as:
- Using secure networks when making payments.
- Avoiding sharing sensitive payment information over email or unsecured channels.
- Compliance Audits
We work with Stripe to ensure continued PCI DSS compliance and review our practices annually to address any necessary updates to our security protocols.
Additional Information:
- For more details on Stripe’s PCI compliance, please visit Stripe’s PCI DSS Documentation.
Should you have any concerns or questions about how your payment information is handled, contact us at Calvin@alnursing.org.