PCI DSS Level 1 Certified

PCI DSS Level 1 Certified

ApexonPay maintains the highest level of Payment Card Industry Data Security Standard compliance, ensuring your credit card transactions are processed with maximum security and protection.

PCI DSS Compliance Levels

Understanding the four levels of PCI DSS compliance and where ApexonPay stands

Level 1
6M+ annually
On-site assessment by QSA
Current Status

Highest level of PCI DSS compliance with most stringent requirements

Level 2
1M-6M annually
Self-assessment + quarterly scan
Previously Achieved

Second tier compliance with regular self-assessment requirements

Level 3
20K-1M annually
Self-assessment + quarterly scan
Exceeded

Mid-tier compliance suitable for medium volume merchants

Level 4
Under 20K annually
Self-assessment questionnaire
Exceeded

Entry level compliance for low volume merchants

Card Brand Certifications

Direct certification and partnership with major card brands for secure payment processing

Visa Logo

Visa

Certified Payment Facilitator
Certification ID
VPF-APX-2024-001
Direct processing
Token services
Fraud tools
Global acceptance
Mastercard Logo

Mastercard

Payment Service Provider
Certification ID
MCPSP-APX-2024-002
Mastercard processing
Tokenization
Risk management
Chargeback protection
American Express Logo

American Express

Direct Processor
Certification ID
AMEX-DP-2024-003
Amex processing
Premium services
Corporate cards
Travel benefits
Discover Logo

Discover

Network Partner
Certification ID
DFS-NP-2024-004
Discover processing
Cashback programs
Network access
Merchant services

PCI DSS Security Requirements

Comprehensive implementation of all 12 PCI DSS requirements for maximum payment security

1

Install and maintain firewall configuration

Requirement 1

Firewalls are computer devices that control computer traffic allowed between an organization's networks and less-trusted networks.

Compliant

Implementation Details:

Network segmentation architecture
Firewall rule documentation
Regular configuration reviews
Traffic monitoring and logging
2

Do not use vendor-supplied defaults

Requirement 2

Malicious individuals often use vendor default passwords to compromise systems.

Compliant

Implementation Details:

System hardening procedures
Default password changes
Configuration standards
Regular security updates
3

Protect stored cardholder data

Requirement 3

Protection methods include encryption, truncation, masking, and hashing.

Compliant

Implementation Details:

Data encryption at rest
Secure key management
Data retention policies
Secure data disposal
4

Encrypt transmission of cardholder data

Requirement 4

Sensitive information must be encrypted during transmission over open, public networks.

Compliant

Implementation Details:

TLS/SSL encryption
VPN connections
Certificate management
Secure protocols only
5

Protect all systems against malware

Requirement 5

Deploy anti-virus software on all systems commonly affected by malware.

Compliant

Implementation Details:

Anti-virus deployment
Regular signature updates
System monitoring
Incident response procedures
6

Develop and maintain secure systems

Requirement 6

Security vulnerabilities in applications and systems provide opportunities for criminals.

Compliant

Implementation Details:

Secure development lifecycle
Code review processes
Vulnerability assessments
Change control procedures

Audit History & Reports

Annual assessments by certified Qualified Security Assessors (QSA) ensuring continuous compliance

2024
Assessment Year

Trustwave SpiderLabs

PCI DSS Level 1 Assessment
Report: TW-PCI-2024-APX-001
100%
Full Compliance
Valid until June 2025
2023
Assessment Year

Coalfire Systems

PCI DSS Level 1 Assessment
Report: CF-PCI-2023-APX-001
98%
Full Compliance
Valid until June 2024
2022
Assessment Year

Trustwave SpiderLabs

PCI DSS Level 1 Assessment
Report: TW-PCI-2022-APX-001
96%
Full Compliance
Valid until June 2023

Advanced Security Measures

Beyond PCI compliance - our comprehensive security architecture protects your payment data

End-to-End Encryption

AES-256 encryption for all card data from capture to processing

Point-to-Point Encryption (P2PE)

Tokenization

Replace sensitive card data with secure tokens for storage

Visa & Mastercard Token Service

Real-Time Monitoring

24/7 security monitoring and anomaly detection systems

AI-Powered Threat Detection

Verified PCI Compliance

Trust in our highest-level security certification for your payment processing needs

Level 1 Certified

Highest PCI DSS compliance level

Annual Assessment

Certified by qualified security assessors

Full Compliance

All 12 requirements fully implemented