A: Hi there,

Great questions - security is important!

**PCI Compliance:** Yes, we are fully PCI compliant. We do NOT store credit card data in our databases. We securely pass one-time credit card information in one direction to your configured payment gateway (Stripe, PayPal, etc.). They send back to us an authorization token, and that is what we store in our database to reference that card. Then we make a secure call in every case to them to ask for an authorization, and they handle everything on their side as far as storing card information. Our system never even sees the credit card number because a secure tunnel is established between the payment gateway's servers and the customer - the card information passes only through that secure tunnel. Our system never touches it, never accesses it, and never sees it again because it never comes back from the payment gateway destination. Probably a lot more than you really wanted to know, but those are the mechanics of what makes it completely secure and PCI compliant.

**Credit Card Authorization Forms:** Yes, we have a dedicated feature for this - Stored Payment Information. This allows you to securely collect and store payment method authorizations from your Contacts. Documentation here: https://help.suitedash.com/article/458-stored-payment-information

**Collecting IDs and Card Images:** Yes, you can use File Upload Custom Fields on Forms to collect copies of IDs and images of credit cards. These files are stored securely in your SuiteDash account.

**Credit Card Vaulting:** The alternative to the token system I described above - where you need payment information on file that can be retrieved and viewed - is our Credit Card Vault feature (part of the PLUS Bundle Power-Up). This allows you to securely "Vault" credit cards from your Contacts using enterprise-level technologies paired with military-grade PGP encryption. You can then easily and securely retrieve/view the complete credit card number, expiration, and security code. It's 100% PCI Compliant. This might be exactly what you're looking for depending on your workflow. Documentation here: https://help.suitedash.com/article/478-credit-card-vaulting

Hope that helps!

Thanks,

Mike