Tribal understands the need for institutions to comply with PCI (Payment Card Industry) regulations when processing card payments, with EBS playing a key role in that process. This topic details how EBS integrates securely with third-party payment providers and details the security controls in EBS that assist with PCI compliance. You can also view the processing sequence for each third-party payment provider.
Integration with ePayment providers
EBS integrates with several third-party ePayment providers to process and validate card payments. All providers are PCI compliant, ensuring that card data is secured during processing and is not shared with EBS.
Your third-party ePayment provider does not expose credit card information to EBS during processing and card information is not retained by EBS.
The following security controls secure ePayments in EBS
Restricted access to view and edit institution settings for ePayments providers
You must have the Institution Settings role in the EBS Central Apps/Enqs/Enrols group to view or configure institution settings for ePayments.
Secured ePayment transaction data
You can view, but not alter or amend, references to third-party ePayment transactions on the Receipts tab in the Payments screen of the enrolments module.
ePayments processing
The following diagrams illustrate the ePayments processing sequence for each provider:
UK Access Paysuite Pay 360 Secure Card Portal
The following diagram illustrates the interaction between EBS and Access Paysuite Pay 360 Secure Card Portal.
Refer to Access Paysuite Pay 360 Secure Card Portal for further information about the data transmitted during the payment process.
Access Paysuite Pay 360 Secure Card Portal is Payment Card Industry Data Security Standard (PCI DSS) certified .
UK Civica Paylink
The following diagram illustrates the interaction between EBS and Civica Paylink.
Refer to Civica Paylink for further information about the data transmitted during the payment process.
Civica Paylink is Payment Card Industry Data Security Standard (PCI DSS) certified.
UK Paysafe
The following diagram illustrates the interaction between EBS and Paysafe.
Refer to Paysafe for further information about the data transmitted during the payment process.
Paysafe is Payment Card Industry Data Security Standard (PCI DSS) certified. Refer to Paysafe for more information about Paysafe checkout integration and compliance with PCI SAQ-A.
Further information about how the payment industry develops and adopts data security standards is available from the PCI Security Standards Council.