PCI Compliance
Ikawaari maps its controls to PCI DSS requirements. The applicable status, scope and validity period must be confirmed by an official attestation. This page does not establish PCI DSS Level 1 certification.
Your PCI Responsibilities
| Integration Method | Your PCI Level | What You Need |
|---|---|---|
| Ikawaari Checkout | Depends on the integration | Confirm the applicable scope and questionnaire |
| Payment Links | Depends on the integration | Confirm the applicable scope and questionnaire |
| Direct API (card data) | Depends on the integration | Review card data handling before integration |
PCI Attestation
Complete your annual PCI attestation in Settings → Compliance → PCI DSS.
- Select your SAQ type
- Review the compliance checklist
- Attest and submit
Best Practices
- Use Ikawaari Checkout or Payment Links to avoid handling card data directly
- Never log card numbers, CVCs, or full card data
- Use HTTPS for all pages that interact with payment forms
- Keep systems updated with the latest security patches