Have CC details entered into guest/corporate/owner portals tokanise to ensure PCP compliance
Currently when a user enters their credit card details through the portals, these details drop into RMS in the guest or reservation fields.
As this data is not encrypted this is not PCP compliant. If this information was stored in the vault or tokenised so it would be protected would be far more productive and allow much greater use of these portals.
Anonymous
shared this idea
Thank you for your suggestion on a way we can improve RMS.
Currently available in RMS is the ability to connect a Payment Gateway which can be used in RMS, on the RMS IBE and in the Guest and Corporate Portals to securely obtain guest’s credit card information in a PCI Compliant manner as well as process payments.
Using the exposed credit card fields on the Guest Details is a non-PCI compliant method and is not recommended. These can be disabled in Field Maintenance setup.
https://helpcentre.rmscloud.com/field-maintenance-info/field-maintenance-overview
For more information on PCI Compliance, Payment Gateways and using them with RMS please visit the below Help Centre articles.
https://helpcentre.rmscloud.com/payment-gateways-info/available-payment-gateways
https://helpcentre.rmscloud.com/payment-gateways-info/pci-compliance
We appreciate your valuable feedback and look forward to introducing exciting new features from our user suggestions in 2021.
Kind Regards,
RMS Product Development