Contents of this Article
- Compliance Requirements
- Understanding PCI DSS and Invoca's Role in Protecting your Data
- Invoca’s PCI Certification
- How Invoca Protects Your Data: Redaction
- Redaction
Compliance Requirements
Redaction at Invoca is SOC 2 Type 2 Certified, ISO 27001 Compliant, HIPAA Compliant, PCI DSS Certified, and adheres to GDPR. Visit this resource for a more in-depth overview of Invoca’s Security, Compliance, and Data Privacy policies.
Note: Redaction is available in the USA and UK networks.
Understanding PCI DSS and Invoca’s Role in Protecting Your Data
The Payment Card Industry Data Security Standard (PCI DSS) is a global standard designed to protect credit card information and prevent fraud. If a company handles payment and cardholder data—whether it's storing, processing, or transmitting this information—they must follow PCI DSS rules. This applies to major credit card brands like Visa, MasterCard, American Express, Discover, and JCB.
Invoca's PCI Certification
Invoca is PCI certified, meaning we meet and adhere to the strict security standards required by PCI DSS. Every year, an approved auditor checks our security systems to ensure we’re protecting customer data at all levels, from our infrastructure to our services.
This certification covers all aspects of credit card processing, including phone calls where customers may share their payment details. If these calls are recorded or transcribed, the system must be PCI certified; otherwise, neither the system nor the businesses using it are compliant with PCI DSS.
How Invoca Protects Your Data: Redaction
One key part of Invoca’s PCI certification is our redaction service. This service automatically removes sensitive information such as credit card numbers, expiration dates, CVV codes, Social Security numbers, and passwords from the audio and text of recorded calls.
Note: Reach out to your Invoca CSM or success@invoca.com to inquire about call recording and transcript redaction [PCI-DSS compliance] within your package.
Redaction
When a call is recorded in Invoca, sensitive data is automatically redacted from both the audio recording and the transcript before any data is stored or processed further.
Note: This standard redaction level is being made mandatory for all new customers and will be deployed across all networks. At the moment, redaction cannot be disabled or customized to capture partial entities.
Fields Included in Standard Redaction
The following sensitive information is always redacted:
Personally Identifiable Information (PII):
- Date of Birth (DOB)
- Driver’s License Number
- Passport Number
- Social Security Number (SSN)
- Passwords
Payment Card Information (PCI):
- Credit Card Number
- Expiration Date
- CCV (Security Code)
- Bank Account Number
- Routing Number
Viewing Redaction Settings in your Network
Note: Redaction Settings are defined at the Network not the Profile level.
To see which fields are being redacted in your network:
- Navigate to and click Settings located in the left menu bar.
- Click Redaction.
- You will be taken to a read-only page displaying all fields currently redacted.
For more information on Invoca’s security and data privacy practices, visit our security page.
