Diff: FAQ #1164

Is the P2PE Standard applicable for merchants that have developed/implemented their own encryption solution?

Earlier Version
Later Version
Removed
Added
The P2PE v1.1 standard applies only to third-party P2PE solutions, where all encryption and decryption operations, and all cryptographic keys, are managed by a third party solution provider, and the merchant has no access to clear-text account data or to the P2PE cryptographic keys.

For the
Yes. P2PE v2 standard andintroduced merchant-managed solutions,solutions. Please see the Frequently Asked Questions (FAQ) for Validation Processes for Merchant-Managed Solutions onSolutionson the PCI SSC website.
.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.