Secure payment

Our payment method worldwide is Paypal.

For latam exclusively, we use Mercado-pago.

Security in Paypal

We help you comply with the stringent PCI compliance requirements for data protection both when processing payments and storing financial data . We hold certification under many programs and standards, including the Visa Cardholder Information Security Program, Mastercard Site Data Protection Program and the American Institute of Certified Public Accountant’s Statement on Standards for Attestation Engagements No. 18 SOC 1.

If you manage transactions yourself and touch, store, or transmit card details, you’ll need to obtain and maintain PCI compliance certification for your business. It’s a complex process, involving quarterly network scans and annual questionnaires so we recommend working with a certified security expert.

for the paypal website

Mercado Pago

At Mercado Pago we ensure the Confidentiality, Availability and Integrity of all our processes following the best market practices so that you can use all our products safely.

In addition, for Mercado Pago to be able to operate with credit and debit cards, we must comply with one of the most demanding security standards in the payment industry: Payment Card Industry Data Security Standard.

Definition and context
If you have ever stored, processed or transmitted card data in your company, you have probably heard of PCI. From Mercado Pago we want to help you and simplify the task of understanding these regulations and the different associated responsibilities.

As a Service Provider, we must meet regulatory and security responsibilities towards card brands and acquirers, but even so, security throughout the payment process is the obligation of both parties. Merchants and / or e-commerce platforms that are integrated with payment processors such as Mercado Pago must meet minimum security requirements to mitigate risks of fraud and information leakage, securing user data.

PCI DSS (Payment Card Industry Data Security Standard) is an international security standard that must be met by all entities that store, process or transmit card data.

PCI regulations establish a basic level of protection for cardholders (cardholders) and help reduce fraud and data breaches within the entire payments ecosystem.

Compliance with PCI regulations involves 3 important aspects:

Securely transmit the information corresponding to cardholder data.

Store data according to the best security practices in the industry, under 12 regulatory requirements that are included in the PCI Standard.

Annual validation of compliance with the security controls and evaluation forms proposed by the PCI Council.

We recommend that you visit the official PCI site for more information. Here is a summary of the objectives of PCI security controls.

for mercadopago website