Is our PCI compliance better than Zendesk?

Modified on Sun, 9 Mar at 4:28 PM

Yes. Freshdesk’s approach to PCI compliance is more comprehensive and allows for additional use cases, unlike Zendesk.
Zendesk's approach to PCI compliance is by redaction - i.e, the 15-19 digit primary account number (or PAN) entered into the Zendesk’s PCI Compliant Ticket Field is redacted to the last 4 digits prior to the data being submitted and stored on Zendesk.
On the contrary, in our approach - we store the PAN in its entirety in a secure vault. Account owners in Freshdesk have the authority to define who can unmask and view or edit this information - which is not possible in Zendesk.
Further, as part of our security by design approach, we employ data minimization principles to securely purge cardholder data after 30-days.


Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article