Hi Everyone,
We are embarking on changing our telephony system to include a modern contact centre system for our box office team. As a core requirement of the project, we must ensure that any system that we choose is PCI compliant around call recording and payment processing.
One thing that we are trying to evaluate at the moment is how to process customer not present transactions via the telephone in a PCI compliant way. A few suppliers that we have spoken with enable a payment to be taken via DTMF tones (and automatically stop the call recording), as the system integrated directly with the payment software (they were recommending PCI PAL as an option). But I’m not sure how Tess could handle this apart from doing a manual reconciliation afterwards. I’ve noticed that 14.1 has a point to point encryption mode which seems like a step in the right direction of what we would ultimately want to achieve by de-scoping our network from payments - it’s just how we take non-web CNP.
Has anyone been able to achieve this? Would love to hear peoples approaches on how this has been tackled.
Thanks,
Scott