As a payment processing services provider, Everlink is responsible for executing and securing the credit card transactions of credit unions, banks, and other financial services organizations in Canada.
Given the sensitive payment data it manages, delivering rigorous security protections and sustaining compliance with the Payment Card Industry Data Security Standard (PCI DSS) are critical mandates. To meet PCI DSS requirements for protecting stored cardholder data on backup tapes, the team at Everlink relies on comForte and its SecurTape solution.
The Challenge
Based in Ontario, Canada, Everlink is an innovative provider of payment processing products and services, including payment network gateways, ATM managed services, card issuance solutions, fraud mitigation services, and point-of-sale solutions.
Given the central role its solutions and services play in customers’ transactions, Everlink is responsible for managing vast amounts of payment details. Consequently, complying with all facets of the PCI DSS is an absolute must. To meet the PCI DSS requirements for protecting cardholder data, the organization needed to secure the sensitive assets that were being saved to backup tapes from its HP NonStop systems.
The Solution
To address its compliance commitments, the team at Everlink looked for an encryption solution that would enable efficient and secure encryption of data on HP NonStop backup tapes. After an evaluation of the alternatives, the company chose SecurTape from comForte.
SecurTape offered all the essential encryption capabilities Everlink needed to ensure compliance with requirement 3.4 of the PCI DSS standard, which outlines requirements for securing stored cardholder data. Further, the solution offered the ease of installation and value that made it a good fit for Everlink’s IT team and budget.
SecurTape works with standard HP NonStop tape utilities to transparently enable the encryption and decryption of data. Consequently, the solution made it highly practical to meet Everlink’s requirements for encrypting sensitive data on backup tapes before they are sent offsite.
The Benefits
With SecurTape, Everlink can ensure the backup tapes that hold sensitive payment records are secure and compliant with requirement 3.4 of the PCI DSS. Further, with its ease of installation, transparent operation, and cost-effective pricing, Everlink is able to meet these compliance requirements with a minimum of time and expense.
“Operational performance and client-centricity influence all of our activities as an organization, as such we take the protection of our clients’ data very seriously,” says Carlo Tuzi, Vice President, Technical Architecture for Everlink. “SecurTape provided a solution that allowed us to meet our critical PCI DSS compliance requirements and ensure that we maintain our position at the forefront of industry performance and reliability.”
About Everlink
Everlink Payment Services Inc. based in Markham, ON, Canada is a joint-venture company owned by FIS and Celero Solutions, and is fully compliant and EMV certified with the Interac, MasterCard and Visa associations. Everlink is a recognized leader in the dependable secure delivery of Electronic Transaction Processing services, EMV Chip, Managed ATM Services and Integrated Payment Solutions in the Canadian financial services marketplace. Everlink is the first in Canada to instantly issue a fully personalized, Interac and MasterCard certified EMV Chip card.