Payment Card Industry (PCI) Data Security Standard


The PCI Data Security Standard is a list of 12 items that retailers, online merchants, data processors and any business that handles credit card information must comply with by June 2005.

TMS’ processes for tape handling have been audited by customers who must comply with this standard.

The TMS processes ensure there is a chain of custody for the credit card data (stored on magnetic media) as it travels from the customer to  TMS, cycles and returns back to the customer.

In response to a question from the offsite storage industry body, PRISM International. The PCI Security Standards Council confirmed that they do not prohibit the transfer of the Primary Account Number (PAN) to third parties. The attached document from the Council then goes onto clarify the specific relationship between the Merchent and the Third Party (offsite storage vendor).

Key Benefits