Contents of this Article
- Compliance Requirements
- Understanding PCI DSS and Invoca's Role in Protecting your Data
- Invoca’s PCI Certification
- How Invoca Protects Your Data: Redaction
- Redaction Sensitivity Levels
Compliance Requirements
Redaction levels at Invoca are SOC 2 Type 2 Certified, ISO 27001 Compliant, HIPAA Compliant, PCI DSS Certified, GDPR. Visit this resource for a more in-depth overview of the Security, Compliance, and Data Privacy policies at Invoca.
Note: Redaction is available in the USA and UK networks.
Understanding PCI DSS and Invoca’s Role in Protecting Your Data
The Payment Card Industry Data Security Standard (PCI DSS) is a global standard designed to protect credit card information and prevent fraud. If a company handles payment and cardholder data—whether it's storing, processing, or transmitting this information—they must follow PCI DSS rules. This applies to major credit card brands like Visa, MasterCard, American Express, Discover, and JCB.
Invoca's PCI Certification
Invoca is PCI certified, meaning we meet and adhere to the strict security standards required by PCI DSS. Every year, an approved auditor checks our security systems to ensure we’re protecting customer data at all levels, from our infrastructure to our services.
This certification covers all aspects of credit card processing, including phone calls where customers may share their payment details. If these calls are recorded or transcribed, the system must be PCI certified; otherwise, neither the system nor the businesses using it are compliant with PCI DSS.
How Invoca Protects Your Data: Redaction
One key part of Invoca’s PCI certification is our redaction service. This service automatically removes sensitive information such as credit card numbers, expiration dates, CVV codes, Social Security numbers, and passwords from the audio and text of recorded calls.
Note: Reach out to your Invoca CSM or success@invoca.com to inquire about call recording and transcript redaction [PCI-DSS compliance] within your package.
Redaction Sensitivity Levels
Whenever you record calls within Invoca, a standard level of redaction is automatically applied to both the audio recording and the transcript.
Note: This standard redaction level is mandatory and cannot be disabled or customized to capture partial entities.
Fields Included in Standard Redaction
The following sensitive information is always redacted:
Personally Identifiable Information (PII):
- Date of Birth (DOB)
- Driver’s License Number
- Passport Number
- Social Security Number (SSN)
- Passwords
Payment Card Information (PCI):
- Credit Card Number
- Expiration Date
- CCV (Security Code)
- Bank Account Number
- Routing Number
Viewing Redaction Settings in your Network
Note: The Redaction Settings are at the Network not the Profile level.
To see which fields are being redacted in your network:
- Navigate to and click Settings located in the left menu bar.
- Click Redaction.
- You will be taken to a read-only page displaying all fields currently redacted.
For more information on Invoca’s security and data privacy practices, visit our security page.
