Non BB hosted BBNC and client PCI compliance

Chris Thomson 2

Hi there



Small issue has come up. I was wondering how people have dealt with the following.



Obviously BB products their end are all PCI compliant, but if BBNC payment forms are in house and the client is not PCI compliant, how have people got around the entering of credit card details on the site?

James Heywood

Hi Chris,



I work at Oxford University. We run a number of websites which take payments. However, as an organiasation we're not PCI compliant.



So, we:



1. Set all pages to be served under https (which is probably over-zealous)


2. Connect our donation/events parts to Payment 2.0 parts. These part the donor to Blackbaud servers for entering credit card details, then back again afterwards.



Hope this is useful,



James