CiviCRM Community Forums (archive)

The non-profit organization I work for is currently using a CiviCRM/Drupal setup that is using the Moneris API to accept credit card payments.

We've recently received a message in the mail from Moneris warning us about PA-DSS compliance being mandatory by July 1st.

I'm very unfamiliar with PCI/PA and the other regulations. I've been doing my best to research what needs to be done, but I'm not even entirely sure that it applies to us. We do a very low volume of transactions and store zero credit card information.

Am I correct in assuming we'd need to be using the Moneris hosted payment page rather than the API to avoid needing to deal with PA-DSS compliance?

Thanks! I hope this isn't spectacularly off topic but I can't seem to find a straight answer anywhere!

Hi

My company is in the same situation.

dmccarney - Did you find a solution ?

Thanks