This guide is a general summary and is not intended as legal advice. For guidance specific to your practice, consult a legal professional or your regulatory body.
Is Jane PCI compliant?
Yes, Jane is PCI compliant. This means that any card payments you take or store on file through Jane Payments follow PCI DSS (Payment Card Industry Data Security Standard) requirements.
Jane Payments handles card data in a PCI-compliant way, including having a third-party audit us annually to ensure every base is covered.
No Plain Credit Card Data Stored in Jane
Jane never stores a patient's plain credit card information directly on Jane's servers. When you enter a credit card in Jane, Jane instantly transfers that data to one of Jane's payment processing partners through an encrypted transfer. The PCI-compliant payment processing partners store that information for Jane.
These partners send Jane back a token (a non-sensitive placeholder) that references the actual card data held securely by Jane's payment processors. Note that this token can't be used outside of Jane. The only information Jane stores about the credit card is the last 4 digits and the expiration date so that the patient will know which card they gave you.
Learn more about Jane Payments.
What is PCI compliance?
The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements that applies to any organization that accepts, processes, or stores credit card payments. Compliance is overseen by the PCI Security Standards Council.
PCI compliance is a shared responsibility. Jane Payments provides a PCI-compliant environment for capturing and processing payments, but clinic staff also need to follow secure practices, such as never storing credit cards in plain text.
Does PCI apply to my clinic?
Potentially. Clinics and their staff are responsible for handling credit card data appropriately, including never storing this information in plain text (in Jane or beyond).
If you're unsure of how PCI compliance applies to your organization, contact your regulatory body for guidance.
If you have questions about Jane's PCI compliance or how we handle payment security, reach out to our Privacy and Security team at [email protected].