cancel
Showing results for 
Search instead for 
Did you mean: 

Does Braintree extension store card details locally?

   Did you know you can see the translated content as per your choice?

Translation is in progress. Please check again after few minutes.

Does Braintree extension store card details locally?

We manage a Magento ver. 1.9.2.4 Community Edition installation for a client. We inherited this rather than set it up ourselves. We have been asked to advise on PCI compliance, and I want to be sure that NO card details are being stored by Magento itself. Card details ARE entered through Magento itself, rather than in a separate Braintree window.

 

In Magento Connect manager, the following module is shown to be installed:

 

Braintree_Payments

2.0.0 (stable) 

Increase sales, reduce risk, and save money with credit card processing from Braintree and Magento.

 

In configuration/payment methods, under Braintree, the payment method is set to Authorise and Capture, and Use Vault is set to no.

 

Card details do not seem to be retained under a user account, and as far as I can tell all of the above should mean they are not being stored, but can anyone advise if this is indeed the case, or how to be sure?

 

Because all I can see is the above module installed, I cannot be sure that it corresponds to the Braintree Extension linked from this page:

https://magento.com/security/best-practices/pci-compliance-checklist-ecommerce-businesses

(the link does not work...)

 

Thanks for any help on this.

1 REPLY 1

Re: Does Braintree extension store card details locally?

It looks like you may be running the official Braintree Payments extension which is detailed here:-

http://ext.topmage.com/Braintree_Payments.html

 

If Use Vault is set to No, I believe you are not storing any card details locally. 

 

Anyway I believe Braintree no longer developed their official extension and they are now recommending the following extension by Gene:-

https://www.magentocommerce.com/magento-connect/braintree-payments-with-hosted-fields.html

 

The extension by Gene includes a migration wizard so you should be able to migrate over from the old extension easily.