> ## Documentation Index
> Fetch the complete documentation index at: https://docs.m1amdocs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Amdocs Security and PCI Compliance

**MarketONE has security and compliance built into every layer of its platform architecture.**

At the core of its platform, MarketONE is built to keep data secure and compliant – two aspects of business that are instrumental for meeting subscription business needs and enabling growth. Resellers (Service Providers) benefit from the cloud data center and network architecture built to meet the requirements of the most security-sensitive organizations and most strict compliance frameworks.

The crucial policies, architecture, and operational processes that Resellers (Service Providers) must implement in their payments and billing environments to comply with global data and security measures are automatically adopted with the MarketONE platform. The holistic software-based security tools that are part of the MarketONE platform monitor and protect the flow of information in and out of your cloud resources.

## Security Support

Amdocs MarketONE has created far-reaching measures to safeguard personal subscriber information against loss, theft, unauthorized access, use, and modification. These measures provide the appropriate level of security for specific risks surrounding processing information.

Our platform adheres to the following security standards:

* SOC 1 type 2, SOC 2 Type 2 certified
* SOX compliant
* PCI-DSS Level 1 compliant
* ISO 27001
* EU GDPR and SCC committed
* California CCPA committed
* Brazilian LGPD committed

The following key applications and services provide advanced internet security technology to the MarketONE platform:

* Encryption
* Digital Certificate
* Security Development Lifecycle
* Access Control of Customer Data
* Audits and Accountability
* Architecture
* Media Protection
* System and Communication Protection
* Multi-level System and Data Recovery Schemes
* Operation-Level Security Control (for example: Multiple System Controls and certifications or Vulnerability Management and Configuration Management)
* Amdocs MarketONE IDP providing Multi-Factor Authentication for Commerce Engine users, complex and unique password requirements

## PCI DSS Compliance

**PCI DSS** (Payment Card Industry Data Security Standard) is a set of security standards created by the credit card industry to protect payment systems from data breaches. Amdocs holds PCI-DSS (Payment Card Industry Data Security Standard) Level 1 service provider certification, which was achieved through continuous investment in rigorous controls and processes and thorough completion of SOC 1 type 2 and SOC 2 Type 2 compliance certification.

To become a Level 1 PCI-certified Service Provider, Amdocs met the following requirements and in turn, provides maximum security and compliance benefits to all subscription business Resellers (Service Providers):

* Install and maintain a firewall configuration to protect cardholder data
* Do not use vendor-supplied defaults for system passwords and other security parameters
* Protect stored cardholder data
* Encrypt transmission of cardholder data across open, public networks
* Protect all systems against malware and regularly update antivirus software or programs
* Develop and maintain secure systems and applications
* Restrict access to cardholder data by business need-to-know basis
* Identify and authenticate access to system components
* Restrict physical access to cardholder data
* Track and monitor all access to network resources and cardholder data
* Regularly test security systems and processes
* Maintain a policy that addresses information security for all personnel

## GDPR Compliance

As part of helping our Resellers (Service Providers) protect their data, Amdocs MarketONE is fully committed to maintaining its **GDPR** compliance, thereby adding protection to Resellers' (Service Providers') subscription strategy, design, and overall data privacy. Amdocs helps our Resellers (Service Providers) understand, and where applicable, comply with the General Data Protection Regulation (GDPR), which is designed to give European Union (EU) citizens more control over their data and seeks to unify several existing privacy and security laws under one comprehensive law. Amdocs allows Reseller (Service Provider) administrators to perform GDPR erasure on their own.

**Note:** The GDPR not only applies to organizations located within the EU, but it also applies to all companies processing and holding the personal data of data subjects residing in the EU, regardless of the company’s location.

Beyond replication, backup, and disaster recovery planning, encryption in both transit and at rest, advanced threat detection, and common controls, MarketONE helps subscription businesses utilize and benefit from the following measures as part of maintaining GDPR compliance:

* Security and certifications
* International data transfers
* Prime data location and portability in the United States
* Individual privacy rights and consent
* Data subject rights
* Choice and consent

**Parent topic:**[Payments](paymentBasics)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.