Encrypted card devices and recurring payments

We are a RAMP client and are looking at our PCI scope. We thought that installing encrypted card readers and keypads would reduce our scope. I have just been in contact with support and found out that encrypted devices never store the credit card number in the Tessitura databese. It goes directly to Vantiv. This is great for PCI, but means that there is no credit card in Tessitura to use for monthly membership billing. A credit card has to be in the Tessitura database before it can be tokenized, so tokenization does not solve this problem either. Our IT guy wants to know what other organizations are doing about this. Any help? Thanks.
Parents
  • Former Member
    Former Member $organization

    Hi Lou,

    We were in the exact same place as you a few months ago. We decided to put EMV readers in our box office for specific transactions. Since we really only need to save cards for donors and subscribers, we've set in place business rules for out ticket sellers. Any single ticket purchases go through the EMV readers, any subscription purchases they type the card number in the Tessitura payments window. Our gifts processor doesn't use a card reader at all. 

    Eventually we will go to tokenization for the donor and subscriber cards we are saving, but at the moment there's some work on our custom website that needs to happen first. We're also waiting on v.14 because it seems that the payment updates may integrate with tokenization a little better.

    Hope this helps,

    Dorothy

  • Thanks for everyone's replies. Greg Stickney from support reached out to me and clarified my confusion. Enrypted devices can be used to enter a credit card which can be converted to a token and stored on the constituent's record. We will go that route for our recurring payments. We can have encryption and recurring payments! That is what I wanted to hear.

Reply
  • Thanks for everyone's replies. Greg Stickney from support reached out to me and clarified my confusion. Enrypted devices can be used to enter a credit card which can be converted to a token and stored on the constituent's record. We will go that route for our recurring payments. We can have encryption and recurring payments! That is what I wanted to hear.

Children
No Data