![[ECRYPT]](https://files.readme.io/a033422-Ecrypt-Logo-ecrypt.svg){kind=link}
Secure Tokenization
How ECRYPT protects customer payment details
ECRYPT uses tokenization to protect sensitive cardholder data for both online and card-present transactions. ECRYPT converts credt card number, expiration date and billing zip code into a one-time, alpha-numeric token which is used to complete a transaction. Tokenization ensures that sensitive PAN data is never stored on your network and helps API integrations remain out-of-scope for PCI compliance. Tokens generated from card-not-present checkout elements can be stored in a customer's wallet for future payments.
[1200]
![[1200]](https://files.readme.io/168ffbe-Tokenization_diagram_1.png){kind=link}
Merchants are still responsible for PCI complianceWhile ECRYPT's API for online checkout and Cloud EMV help software partners stay out-of-scope for PCI compliance, merchants accepting payments through ECRYPT are still responsible for their annual PCI Self Assessment Questionnaire to avoid non-compliance fees.
How merchants stay PCI compliant
While ECRYPT protects cardholder data and removes PCI scope for integrated software partners, there are still certain steps merchants must take in order to maintain PCI compliance for their accounts.
| Security Measure | Description | Required for PCI Compliance |
|---|---|---|
| PCI Self Assessment Questionnaire (SAQ) | An annual questionnaire that all merchants who accept credit cards must complete in order to stay PCI compliant. Click here to read more about completing your annual SAQ for PCI compliance. | Yes |
| AVS Settings | Merchants should require the numeric portion a cardholder's street address and zip code at checkout to avoid fraud and downgrades. | No |
| Request CVV | Capturing CVV (typically found on the back of credit cards) is another way to avoid fraudulent transactions and makes transactions more secure. | No |
| Capture Signatures | For merchants running large-ticket transactions in a card-present environment, capturing signatures assist in winning chargebacks in the event of fraudulent customers using stolen credit cards. | No |
| Check Identification | Another useful precaution for large-ticket purchases occurring in-person. Although merchants develop relationships with their customers, it is wise to match the cardholder name to the drivers license of unfamiliar customers. | No |
Updated 6 months ago