CiviCRM Community Forums (archive)

Just trying to understand something here - if I were to configure PayPal Pro as the payment processor, where would the customer data including credit card numbers be stored? On my server or on PayPal?

The reason I am asking is that PayPal makes PCI Compliance mandatory for PayPal Pro and I thought this may be the reason why.

Can anyone confirm this?

On a related note, is it necessary to sign up for the scan alert service to ensure PCI compliance or can I do it myself?

Thanks,
Venkat

Hello Mike,

Good to hear that none of the payment processing options in CiviContribute store cc data on the server.

However, PayPal's mandatory requirement for PCI Compliance seems independent of this and tied to just the decision to use PayPal Pro. You can see it in the call out just below the graphic in the middle of the page here:
https://www.paypal.com/cgi-bin/webscr?cmd=_wp-pro-overview-outside&nav=2.0.1

Or, am I missing something?

Thanks,
Venkat

Venkat,

If you're not set on PayPal Pro, try a merchant that we use with great success.  PayJunction.com.  We wrote a payment processor that is now included in the 1.9 baseline.  Read about it here: http://wiki.civicrm.org/confluence/display/CRMDOC/PayJunction+Configuration.  It is quite easy to get set up and it integrates completely with your website - no passing off to the merchant site to complete the transaction.

Good luck,
Mike

Venkat,

If you're not set on PayPal Pro, try a merchant that we use with great success.  PayJunction.com.  We wrote a payment processor that is now included in the 1.9 baseline.  Read about it here: http://wiki.civicrm.org/confluence/display/CRMDOC/PayJunction+Configuration.  It is quite easy to get set up and it integrates completely with your website - no passing off to the merchant site to complete the transaction.

Good luck,
Mike

Mike,

Thanks for this reference. I see that you're using it for the Conservation Fund site

I am not particular about PayPal Pro. It's just that I am looking to use CiviCRM for Indian NGOs and PayPal has recently made it possible to withdraw funds to  bank accounts in India. I am not sure if PayJunction provides international merchant accounts.

Venkat

Hi Lobo,

The ccavenue thing - that was actually yours truly at work

I emailed Claudian about it and then the NGO I was working for didn't show too much interest about sponsoring it, so I sort of just left it at that . That reminds me to email Claudian.

As for ccavenue, well, it's a mixed bag in terms of reviews. But, it's a fact that their clients are some of the biggest companies in India, so I would say they're okay. The reason for my interest in ccavenue was they're the most affordable payment processing option in India at the moment.

Venkat

If ccavenue is the best option for india, then we should just add support for ccavenue in 2.0.

That would be a real shot-in-the-arm for CiviCRM adoption in the Indian NGO sector, especially now that NGOs can also use PayPal as an additional option and directly withdraw to their Indian bank accounts.