less than a minute read • Updated 4 minutes ago
Foxy's security and compliance certifications
How to verify Foxy's PCI DSS Level 1 Service Provider status, request our Attestation of Compliance, and find copy/paste policy language for your own store.
Foxy is a PCI DSS Compliant Level 1 Service Provider, the highest level of PCI compliance. This article covers how to verify that status, request documentation, and find language you can reuse in your own store’s policies.
Foxy is a PCI Compliant Level 1 Service Provider
Being a Level 1 Service Provider means Foxy’s systems are secured to the highest standards of PCI DSS. You can independently verify this status at:
Visa’s Global Registry of Service Providers (searchable site)
Mastercard’s PCI Compliant Service Provider List (look for the “Service Provider List” section)
Requesting documentation
To report a security issue, use our official security contact.
Foxy’s PCI Attestation of Compliance (AOC), prepared by our QSA, is available by request.
How this affects your own compliance requirements
Using Foxy takes on a meaningful share of the PCI compliance burden for your store, but your own requirements still depend on your specific setup. See PCI DSS and compliance requirements for a breakdown of the different SAQ levels and which one is likely to apply to you.
Copy/paste text for your own policies
If you need a blurb for your customer-facing marketing or policies — and you aren’t accepting cardholder data except through Foxy — you’re welcome to use the following:
Cardholder Data Security Policies:
In order to minimize the risk of security incidents, we fully outsource all payment processing to Foxy.io. Foxy.io is PCI DSS (Payment Card Industry Data Security Standard) Compliant as a Level 1 Service Provider, and is listed on both Visa and Mastercard’s global registries. Anytime you submit payment information via our website, you are submitting through Foxy.io’s secure infrastructure. If you opt to save your payment information during checkout, that information is stored at Foxy. We don’t have access to your payment details except for the last 4 digits, the card type, and the expiration date.