PCI DSS Explained

Protects payments without exposing card data.

GDPR Explained

Protects payments without exposing card data.

MiFID II Explained

Protects payments without exposing card data.

PCI Participating Organization

We are a member of the Payment Card Industry Security Council so our knowledge and skills are at the forefront of the industry.

What it all means:

• Influences security standards
• Industry-trusted expertise
• Latest compliance knowledge

Systems and Organisation Controls 2 (SOC2)

By engaging an independent CPA to examine and report on a service organization’s controls, service organizations can respond to meet the needs of their user entities and obtain an objective evaluation of the effectiveness of controls that address operations and compliance, as well as financial reporting at those user entities.

What it all means:

• Proven data protection
• Independent security assurance
• Trusted operational controls

Cyber Essentials Plus

We are proud to be certified under the Cyber Essentials Plus program, a vital component of the UK Government's cybersecurity scheme. Established in 2014, this initiative mandates certification for suppliers serving central government bodies, ensuring robust protection against common cyber threats. Our commitment to Cyber Essentials Plus underscores our dedication to safeguarding our systems and data against evolving online risks.

What it all means:

• Government-backed security
• Protection from common threats
• Independently verified controls

Cyber Essentials

We are certified under the UK Government Cyber Essentials scheme, established to protect organizations against common online threats. Since its launch in 2014, the Government mandated all suppliers working for central government organizations to be certified against the Cyber Essentials scheme.

What it all means:

• Baseline security controls
• Self-assessed certification
• Entry-level protection

G-Cloud / Crown Commercial Service

The Crown Commercial Service (CCS) brings together policy, advice and direct buying; providing commercial services to the public sector and saving money or the taxpayer. Eckoh is listed on the Crown Commercial Service Cloud Framework and so have access to public sector organizations looking for these solutions.

What is all means:

• Approved government supplier
• Trusted by the public sector
• Reduced procurement risk

ISO 27001

This ensures that we manage the security of assets such as financial information, intellectual property, employee details or information entrusted to us by third parties.

What it all means:

• International security standard
• Certified risk management
• Trusted data protection

ISO 9001

This demonstrates our Quality Management System process and our ability to consistently provide our solutions and services to meet customer and regulatory requirements.

What it all means:

• Consistant service quality
• Process-driven reliability
• Ongoing service improvement

Visa Validated Service Provider

The Visa Global Registry of Service Providers (the Registry), located at (www.visa.com/onthelist) acknowledges service providers that have shown their commitment to security by meeting the requirements of the PCI Standard.

What it all means:

• Visa-approved security provider
• Trusted payment handling
• Reduced payment fraud risk

Mastercard SDP Compliant Registered Service Provider

A company’s name appears on this SDP Compliant Registered Service Provider List if (i) Mastercard records reflect the company is registered as a Service Provider by one or more Mastercard Customers and (ii) Mastercard has received a copy of an Attestation of Compliance (AOC) by an appropriate PCI SSC approved Qualified Security Assessor (QSA) reflecting validation of the company being PCI compliant.

What it all means:

• Mastercard-approved security
• Safe card data handling
• Reduced payment fraud risk