We secure card data from storage to transmission.
We have the highest security certification in the card ecosystem. We apply 100% of the PCI DSS controls to our high sales volumes.
We safeguard card data to prevent fraud, theft, and misuse of sensitive information by creating random characters (tokens) that simulate the numbers of each card (PAN).
It is the only place where the consumer's card data is stored. Kushki's unified vault interface provides stringent control of information and complies with all PCI regulations to ensure the highest security.
Kushki's objectives include providing a comprehensive, secure, and easy-to-use service.
To meet this objective and ensure the total security of our customers' and end users' information, Kushki SA, Kushki Colombia SAS, Kushki Peru SRL, Kushki Chile, and all other subsidiaries are committed to recording all events performed within the platform, whether executed by end users or by the company's operational staff.
Additionally, we are committed to properly managing users and their access within Kushki's technology infrastructure, providing quality and scalability in our products, and maintaining a focus on continuous improvement to meet this long-term goal. To this end, a series of processes will be established, along with a set of rules for users and access management within our infrastructure.
To achieve this, a series of processes will be established, along with a set of standards for users and access management within our infrastructure. These processes and standards will align with ISO 27001, and compliance is mandatory to support the Information Security Management System. (SGSI)
Kushki makes this statement of commitment, justified in that it is very important for the company to have security policies, since they are who will guide the personal and professional behavior of employees, suppliers or third parties on the information obtained, generated or processed by the company, likewise the policies will allow the company to work under the best security practices and comply with the legal requirements to which it is obliged to comply.
Due to the importance and sensitivity of the information, the information security system is included within the company's management system, in such a way that allows it to generate continuous improvement of the security system, based on risk management and continuity in Kushki.
In addition, it is committed to properly manage users and their access within the technological infrastructure of Kushki Payments, provide quality and scalability in their products and maintain a focus on continuous improvement to meet this long-term objective.
Date of Publication: 24-09-2024 | Version: 5
These processes and standards will align with ISO 27001, and their compliance is mandatory to support the Information Security Management System (ISMS).