As part of getting an ANZ eGate merchant account set up, ANZ will ask you to complete a Secure Internet Site Declaration form to confirm that your site is secure. For some of these questions, ANZ will refer you to your web developer (i.e. us) to answer the questions.
Here is the information that you will need from us to complete the form:
Q: Shopping Carts - "If you are using a shopping cart, please state the shopping cart name and version you are using."
A: Ozcart v5
Q: Payment Gateways - "If the product you are using is ANZ eGate, the secure gateway is ANZ"
A: ANZ
Q: Payment Pages - "A ‘Payment Page’ is the section of an online store where customers enter their credit card information"
A: The Payment Page is hosted by ANZ
Q: Security requirements for Payment Pages - "Data sent across the internet is typically visible to observers. To prevent unauthorised access to information which should be private, data needs to be encrypted before being sent."
A: The Payment Page is hosted by ANZ. Customer data sent to ANZ prior to facilitate the transaction is encrypted by SSL (key length: 2048 bit)
Q: Security requirements for Websites - Strong Passwords
A: Ozcart supports strong passwords but it is part of your business process to ensure that you use them. We do not use Vendor supplied passwords. Ozcart's servers are quarterly audited for known PCI DSS vulnerabilities by the third party security authority Comodo.
Q: Receipt Requirements / Policies
A: You will need to disclose this information in your about us/policies etc. In your order area you will be able to view Transaction Date and the Generated Unique Transaction Number for an order. You can manually add this to an invoice if you wish, or provide this information to your customer as appropriate.
Q: Storage of Credit Card Data
A: Ozcart websites do not store any credit card information. This information is held by ANZ only.
Q: Security Requirements for Business / IT Systems
A: Ozcart's processes are PCI compliant. You will need to answer these questions as they apply to YOUR business as well.
