ECR Concepts Software has achieved accreditation with Ocius Sentinel which has PCI DSS Certification.

This means that International POS Ltd will be able to provide all Retail and Hospitality EPOS solutions with a fully compliant PCI DSS chip&pin solution.This reduces the merchant’s cost and burden of PCI DSS compliance as no unencrypted cardholder data is left on their network.

The EPOS system uses the Verifone VX810 chip&pin terminal which is supplied for a monthly fee as part of the solution. Options include static and swivel stands.

Why comply with PCI DSS compliance?

Achieving PCI DSS compliance may seem like an extremely daunting prospect for merchants, particularly smaller organisations. However, the consequences of a data breach far outweigh the cost and effort of achieving and maintaining compliance.

Detailed below are some of the ways in which compliance can benefit your business:

·Compliance with the PCI DSS means that your systems are secure, and customers can trust you with their sensitive payment card information, increasing customer loyalty

·Compliance improves your reputation with your acquiring bank

·By complying with PCI DSS, you’ll likely be better prepared to comply with other regulations as they come along, such as HIPAA, SOX, etc

If you are not compliant, there are several possible consequences:

·Compromised data negatively affects consumers, merchants, and financial institutions

·Just one incident can severely damage your brand reputation

·Account data breaches can lead to loss of sales, relationships and depressed share price if yours is a public company

·Financial consequences include lawsuits, insurance claims, payment card issuer and/or government fines

Commidea's Ocius Sentinel is the UK’s first and only dual layer end-to-end encryption payment solution to be awarded the Payment Application Data Security Standard (PA-DSS) certification.

The accreditation certifies that Ocius Sentinel does not store prohibited data, such as full magnetic stripe, CVV2 or PIN data, and supports compliance with the Payment Card Industry Data Security Standard (PCI DSS).

Ocius Sentinel, the UK’s first end-to-end encryption payment solution, ensures that all cardholder data is dual encrypted within the secure environment of the PCI-PTS certified PIN pad before being transmitted across the merchant’s network and into Commidea’s PCI DSS Level 1 certified processing infrastructure. For merchants this means that there is no unencrypted cardholder data on their network and with no access to decryption keys, Ocius Sentinel significantly reduces the merchant’s scope and cost of achieving and maintaining PCI DSS compliance.

“The PA-DSS certification of Ocius Sentinel demonstrates Commidea’s ongoing commitment to ensure the security of the complete payment chain at all times” said Marc White, Head of Security & Compliance, Commidea. “We are delighted to offer the UK’s first end-to-end encryption payment solution which reduces the merchant’s cost and burden of PCI DSS compliance.”

The PCI Security Standards Council granted Commidea’s Ocius Sentinel application on 10th August 2010.