Sign Up ›

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
BARJRDBARJRD 

Is it safe to store Credit Card information in an org?

Is it safe to store Credit Card information in an org?  I have created a Payment object and want to capture credit card information (i.e., CC number, expiration date, etc.).  I know that I can secure these fields within Salesforce, but are there any other security issues that I should be concerned with?  Eventually, we will use some type of online credit card processing but was wondering if this would work until then.

 

Thanks,

Barb

Best Answer chosen by Admin (Salesforce Developers) 
vbadhwarvbadhwar

Hi Barb,

 

If you're storing CC information, you will need to ensure that you understand and comply with PCI requirements. It's entirely upto your organization to decide the best way to do this, but here's a few things we recommend:

- Not storing the entire 16 digit CC numbers within Salesforce

- Encrypting the credit card numbers outside of Salesforce prior to storing them in Salesforce

- If all goes well, we will be providing Apex encryption classes in the next release: http://sites.force.com/ideaexchange/ideaView?c=09a30000000D9xt&id=08730000000BrjGAAS

 

-Varun

All Answers

vbadhwarvbadhwar

Hi Barb,

 

If you're storing CC information, you will need to ensure that you understand and comply with PCI requirements. It's entirely upto your organization to decide the best way to do this, but here's a few things we recommend:

- Not storing the entire 16 digit CC numbers within Salesforce

- Encrypting the credit card numbers outside of Salesforce prior to storing them in Salesforce

- If all goes well, we will be providing Apex encryption classes in the next release: http://sites.force.com/ideaexchange/ideaView?c=09a30000000D9xt&id=08730000000BrjGAAS

 

-Varun

This was selected as the best answer
BARBAR

Thanks Varun!
HaslettHaslett
Yes Bar, it is safe. But you have to keep in mind that there are many fraud sites which look like org sites, even their domain name is the same but they are not legit.

personally, I prefer to use a Virtual Credit Card. If you don't know what it is then you can read our full guideline for creating and using a virtual credit card. https://thinkkers.com/virtual-credit-card-india (https://thinkkers.com/virtual-credit-card-india/)

it is our responsibility to be safe on the internet.

Thanks