Tokenization vs Encryption for Card Data
Every few months a product manager or a board member asks me some version of the same question: "We encrypt the card numbers, so we are PCI compliant and safe,...
11 min441Read →
4 articles tagged #compliance.
Every few months a product manager or a board member asks me some version of the same question: "We encrypt the card numbers, so we are PCI compliant and safe,...
Every fintech founder I have worked with eventually has the same uncomfortable conversation with an auditor, a regulator, or a partner bank's risk team. The...
Every engineer who touches a payments system eventually runs into PCI DSS, usually at the worst possible moment: a few weeks before a deadline, when someone in...
In most software, the data model exists to serve the features. In regulated fintech, the data model also has to serve the auditor, the regulator, and a future...