PCI Compliance

Cybernautic takes data privacy and security seriously—especially when it comes to handling sensitive information. While we have not gone through formal third-party PCI certification, we follow industry best practices and conduct regular internal audits to help ensure our hosting environment and website processes are safe and secure.

What is PCI Compliance?

PCI Compliance refers to a set of security standards established by the Payment Card Industry Security Standards Council. These standards are designed to ensure that businesses that accept, process, store, or transmit credit card information do so securely.

Does Cybernautic store credit card data?

No. We do not store credit card numbers, expiration dates, CVV codes, or other payment details on our servers—ever.

If your website needs to accept online payments, we use trusted third-party payment processors like Stripe, Authorize.net, or PayPal to handle transactions securely. These platforms are fully PCI compliant and ensure that sensitive payment information is never passed through or stored on your website or hosting environment.

What about other sensitive information?

We also have strict guidelines around collecting other types of sensitive data—such as Social Security numbers, driver's license photos, or government-issued IDs.

If your website includes a form that collects this kind of information, we’ll work with you to make sure the data is handled appropriately. That often means delivering submissions directly to a secure third-party destination (like an encrypted email inbox or external system) so that:

• The full sensitive data is not stored in your website’s submission archive

• Your website users can still submit what’s needed

• You stay in control of how the data is received and stored

Can Cybernautic guarantee PCI Compliance?

While we do our part to follow secure practices and reduce risk, Cybernautic does not provide formal PCI compliance certification. That responsibility ultimately falls to the business accepting payments through their site, in coordination with their payment processor.

That said, if you have questions about how your forms or payment systems are set up—or if you're planning to add new features that might involve sensitive data—please reach out. We’ll review your setup and help guide next steps to keep things as secure as possible.

A Quick Note About Email Security:

Standard email is not a secure method for receiving sensitive information. If you're asking users to submit data that includes personal identifiers, financial details, or legal documents, we strongly recommend using a secure, encrypted email service or a compliant third-party platform designed for that type of data.

We’re happy to advise on options if you're unsure about how to handle incoming submissions safely.