Page History

Insert version and date

This document contains the latest update on the Braintree Payments Cardholder data flow. It is reviewed every 6 months, with the latest Version number and Date reviewed above. 

Braintree Payments (a PayPal service) is integrated as a third party-hosted payment partner on Commerce Vision's eCommerce platform (Customer Self Service). As such, customers utilising Our integration uses Braintree Payments' drop-in UI. This means payments through the Braintree Payments gateway on our merchant websites are redirected to a payment page hosted and secured by Braintree Payments. Sensitive As such, customer sensitive card data are never exposed to or handled by Commerce Vision servers and the merchant. This will normally reduce the scope of Payment Card Industry compliance for the merchant.As with all Commerce Vision's third party payment partners, Braintree Payments is a PCI-compliant and PCI-certified partner. . Our merchant websites do not receive, process, store or transmit cardholder data. 

Commerce Vision conducts checks the data security solutions of its third party partners, to ensure compliance with current industry standards and government requirements. 

• Braintree Payments is a validated Level 1 PCI DSS (highest level) compliant provider.
• Braintree Payments is card brand security compliant, e.g., it is a Visa Global Compliant Provider and is on Mastercard's SDP List
• Braintree Payments do not store raw magnetic stripe, card validation code or PiN block data. 
• Users are authenticated every time they log into their Control Panel. Passwords are never stored directly in the database, and all API and Control Panel communication between merchants and Braintree is conducted using TLS (Transport Layer Security).

Refer to Braintree Payment's Data Security statement and supporting documents: https://www.braintreepayments.com/au/features/data-security

ensures that all our third party-hosted payment partners are , Commerce Vision ensures that to accept sensitive card data, this provides a financially secure and compliant solution without exposing Commerce Vision and Merchants to sensitive information. Instead of hosting a payment page on Commerce Vision solution, a 3rd party Hosted Payment Page allows merchants to redirect their customers to a payment page hosted by PCI Compliant and PCI certified partner; 

Disclaimer:? Third-party payment hosted solutions will normally reduce the scope of Payment Card Industry compliance for the merchant as the cardholder data entered by customers are transmitted directly from their browsers to the third-party hosted payment page.