Vault

overview the butter card vault solution is designed to streamline and secure the card data handling process for merchants during checkout flows the key component of our system is the integration of secure elements into your checkout pages these elements, which are essentially an embedded iframe, ensures that sensitive card information is never processed or stored on your systems, maintaining pci dss compliance and reducing your liability our elements can be easily integrated into your checkout flow, are compatible with popular frontend frameworks like react, and are fully customizable from a ui perspective we also offer native javascript implementations that can be tailored to work with any other frontend frameworks in addition to elements, we also offer direct api access for merchants requiring integrations with mobile applications or backend requirements interacting directly with our vaulting api will require providing pci dss aoc documentation please reach out if this is a requirement for your integration security encrypted card storage each card is encrypted within a dedicated merchant container vault, ensuring that sensitive information is securely compartmentalized additionally, we utilize uuids to reference encrypted cards, minimizing any potential risk exposure pci dss compliance our encryption methods adhere to the highest standards set by the payment card industry data security standard (pci dss) this includes utilizing envelope encryption with aes256 gcm, ensuring robust protection of card data restricted employee access our system is designed to restrict direct access to underlying credit card information butter employees do not have the capability to view or access raw card data, aligning with strict pci dss compliance requirements restricted data transmission transmitting raw card data outside of our vault requires stringent endpoint whitelisting, with validation of pci certification currently, this access is restricted to select major payment service providers like stripe, braintree, worldpay, etc certification and scrutiny our solution undergoes rigorous examination by independent certification organizations to validate its security and compliance with pci dss standards this ensures that our system remains robust and resilient against potential threats method 1 vaulting via embedded form element method 2 vaulting via direct api directly interacting with the butter card vault api requires certification of pci compliance interested in working with butter to bring more revenue back to your business? reach out to us here contact\@butterpayments com