Security plays a key role in everything we do here at GoPay. Payments made through the GoPay payment gateway are secured according to the highest security standards and all the information transmitted and stored is always encrypted.
PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) is a set of rules according to which payment intermediaries (and therefore GoPay too) must handle sensitive payment information in order to prevent its misuse. These rules were created at the instigation of card schemes such as VISA and Mastercard, are internationally recognised and practically every organisation that processes card payments has to follow them. In July 2016 we passed an independent audit which confirmed that GoPay complies with security standard PCI DSS version 3.1. We now demonstrate compliance with the standard every year (PCI DSS version 3.2.1). We are therefore the first Czech payment gateway whose solution is certified against the strictest international security standard.
HTTPS
When paying with the GoPay payment gateway, all the information transmitted between the individual parties is always encrypted with 256-bit SSL/TLS. We regularly audit security, the certificates used and the certification authorities we use.
Do you want the Inline payment gateway? Read more about implementing HTTPS for your website.
Handling data
Security and the handling of data, in particular payment card data, is one of the highest priorities for us at GoPay. Only payment cards with verified access by their owner are stored, and always in combination with a verified mobile phone number and e-mail address.