Wingify Engage is compliant with the Payment Card Industry Data Security Standard (PCI DSS). The PCI DSS ensures that compliant entities must process, store, and transmit card information in a secure environment.
The PCI DSS established for Wingify Engage is applicable for the integration code, i.e., the Wingify Engage SmartCode and SDKs required for making Wingify Engage Customer Experience Optimization functional.
If you use Wingify Engage on your website to process the card information, you can make your account compliant for PCI DSS version 4.0.1. This has to do with being selective about the kind of data that is tracked by Wingify Engage and how this data is being accessed by the users of the Wingify Engage account.
How to make your Wingify Engage account PCI DSS version 4.0.1 compliant?
To ensure that the data is collected in your Wingify Engage account and to secure its accessibility to PCI standards, an admin/owner user need to do the following:
Go to SETTINGS > ACCOUNTS -> SECURITY, and under the Login and access section, enable:
1. Expire user's password in 90 days
2. Log user out of Wingify Engage after 15 minutes of inactivity
NOTE:
1. If you have enabled the setting wherein the user gets logged out after 15 minutes of inactivity, their Remember me preference on the login page will be overridden. Also, the settings are applicable for the future login and not for the current login session.
2. Wingify Engage only supports the TLS1.2 version and above.
3. The feature is available for all the customers of Wingify Engage.
By virtue of enabling these options in Wingify Engage, the data in your account and its access methods will comply with PCI DSS 4.0.1 standards.