About FoxyCart's Security and Compliance

• Reporting a security issue
• FoxyCart's PCI Attestation of Compliance (AOC)

FoxyCart is currently a Level 1 Service Provider. This means that our systems are secured at the highest standards of PCI DSS. As of 2013-03-14 we have completed and PASSED our second annual on-site security audit. We ave submitted our AOC/ROC to Visa to be included on their CISP Level 1 Service Provider list. (We have already received confirmation from MasterCard that they've received our certification, but most people care more about the Visa CISP list.)

We use Trustwave as our ASV, are hosted on the FireHost Secure Cloud at their Tier 3 and Tier 4 datacenters, and we work with Specialized Security Services, Inc. as both our QSA and security advisors.