[OPEN-ILS-GENERAL] Credit Card - Stripe Vs Paypal & PCI

[Dawn Dale]

Hi Josh,

We are using Stripe and the credit card information does not reside on our
servers.  We are accepting payments via the TPAC currently. To allow
payments in the library, our libraries are setting up kiosk and having the
patron go to their account and make the payment at the kiosk.  This keeps
up PCI compliant.  As for the self check, my understanding is that it does
not work currently.  We are talking about adding a link to the TPAC on the
self check so that patrons can login and pay fines when they use the self
checkout.  Like you, we do not want staff handling the patron credit card.

I am not sure how the Paypal code works. I know the cost per transaction is
less with PayFlow but there is a monthly charge, correct? With Stripe there
is no monthly charge.

I hope this is helpful.

Dawn Dale
Helpdesk Manager
Georgia Public Library Service
1800 Century Place Suite 150
Atlanta, GA 30345
404-235-7136
ddale at georgialibraries.org


On Tue, May 9, 2017 at 4:48 PM, Josh Stompro <stomproj at exchange.larl.org>
wrote:

> Hello, we are currently using payflow pro, which I think means that our
> evergreen server handles the CC data and puts it in PCI scope.  From what
> I’m reading, if we switched over to using Stripe, which uses a javascript
> library client side to submit the payment, then it would take our server
> out of scope.  Does the Paypal code work the same way?
>
>
>
> It looks like the tpac supports Stripe, but the web based self check does
> not.  How about the staff client/web staff client payment interface.  Does
> that support Stripe?
>
>
>
> Along the same lines, is there a way to disable the staff client credit
> card interface.  We don’t want staff handling credit cards with that
> interface, since they have to type in the code and info, which I believe
> isn’t PCI compliant, but I haven’t found a setting to disable that but
> allow tpac payments.
>
>
>
> Thanks
>
> Josh
>
>
>
>
>
> Lake Agassiz Regional Library - Moorhead MN larl.org
>
> Josh Stompro     | Office 218.233.3757 EXT-139 <(218)%20233-3757>
>
> LARL IT Director | Cell 218.790.2110 <(218)%20790-2110>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://libmail.georgialibraries.org/pipermail/open-ils-general/attachments/20170509/c98feabd/attachment.html>