Tax & Compliance

The Payment Card Industry (PCI) Data Security Standards (DSS) are compliance requirements set by the PCI Security Standards Council to protect cardholder data and reduce fraud. Digital River complies to the highest standards as a Level 1 Service Provider and Merchant.

Digital River ensures the security of sensitive customer data and their personally identifiable information through our alignment of the American Institute of Certified Public Accountants (AICPA) Service Organization Control (SOC) requirements. Our SOC 1 & 2 type 2 reports provide transparency and detail the stringent processes and controls we have in place protecting our clients.

Payment Services Directive 2 (PSD2) regulates online payment services and providers in the European Economic Area (EEA). PSD2 aims to ensure consumer protection and promote a more open, competitive payments landscape. Digital River’s system is PSD2 compliant and leverages 3D Secure 2.0 to screen transactions and support each issuing bank’s strong customer authentication (SCA) prompts.

PrivacyMark is a system governed by the Japan Institute for Promotion of Digital Economy and Community. It assesses private enterprises to ensure that they take appropriate measures to protect personal information. The system aims to increase awareness, protection, and trust for both consumers and business partners. Digital River has been certified by PrivacyMark for over ten years.

We are committed to earning and keeping your customers’ trust. We understand the importance of giving them control and ensuring they can exercise their rights over their own personal data. Our commitment to privacy, including processing and protecting personal data, is demonstrated in our privacy policy.