What is PCI DSS?
PCI DSS (Payment Card Industry Data Security Standard) is the global standard created by the card brands (Visa, Mastercard, American Express, Discover and JCB) that defines the mandatory controls for any business that processes, stores or transmits cardholder data. PCI DSS compliance signals that a merchant applies international best practices to safeguard its customers’ financial information.
How we process your payments
Summa Envíos payment pages embed hosted fields from PayPal Advanced Checkout and Apple Pay. This means card data (number, expiration date, CVV) is sent encrypted directly from your browser to the certified processor, never passing through our servers. Summa Envíos never sees, stores or handles the full PAN or sensitive authentication data.
PCI DSS validation with VikingCloud
Summa Envíos validates its PCI DSS compliance through VikingCloud, a company specialized in payment security compliance. VikingCloud also hosts our Assurance Card, the public record of that validation.
Additional best practices
Beyond PCI DSS compliance, we apply TLS encryption to all site traffic, strict security headers (HSTS, X-Frame-Options, Content-Security-Policy), nonces for inline scripts, internal access controls and periodic reviews. Protecting your financial data is an ongoing responsibility, not an annual checkbox.
Accepted payment methods
We accept Visa, Mastercard and American Express credit and debit cards through PayPal Advanced Checkout, as well as PayPal and Apple Pay on supported devices. All available methods run on PCI DSS Level 1 certified infrastructure, the highest level of the standard.