|
5th Avenue Software Security Features
5th Avenue Software, LLC takes e-commerce security very seriously. Not only do we think the security concerns of our merchant customers are very important, we believe that the many shoppers who will place orders online using our application, deserve the best security practices available.
Payment Transactions
Our software supports a multitude of payment methods, including payment gateways, inhouse payment collection, and off-line payment collection. We recommend a reputable online payment processor over any inhouse payment processing methods.
Although an SSL site is not required to process orders, 5th Avenue Software does require an SSL site to collect any credit card or other payment information. It is up to the merchant to ensure they acquire a valid SSL certificate. It is beyond the scope of the software to validate the SSL certificate. When utilizing inhouse credit card collection, 5th Avenue Software encrypts credit card information and can only be accessed through an SSL connection.
When using a payment gateway or processor, 5th Avenue software does not store any credit card information. Resulting transaction ID’s and authorization codes are recorded with order information. When utilizing a payment gateway or processor, we incorporate as many security features that are available with the gateway. These include:
- Address Verification System (AVS)
- Card Code Verification (CVV2/CVC2)
- Referral URLs
- Customer IP address reporting
- Merchant login/password encrypted in MySQL when stored
Information Security
Customer account information is password protected from other customers. This information is stored in a MySQL/PostgreSQL database which is also password-protected. This password information is encrypted and stored in a data area outside the web content directory. 5th Avenue Scripts are not vulnerable to SQL injections.
|