888-528-9501 | INFO@CONVIO.COM | CONTACT | CAREERS

Certifications

Convio operates under security best practices and undergoes annual third-party assessments to ensure the highest quality compliance standards are met to protect client data. Convio is currently validated as:

PCI DSS

Convio has been validated Level 1 PCI compliant by Trustwave, a third-party security assessment vendor. PCI DSS is the payment card industry security requirement for entities that store, process or transmit cardholder data, and has been endorsed by all the major card brands — Visa Inc., MasterCard Worldwide, Discover Network, American Express and JCB. The Level 1 PCI compliance validation means that the processes, procedures, network configuration and overall environment of the Convio platform have met the stringent guidelines of a third-party audit to protect consumer information and prevent identity theft.

SAS 70 Type II

Convio successfully completed the SAS 70 Type II audit with no exceptions. A widely recognized auditing standard developed by the American Institute of Certified Public Accountants, the SAS 70 Type II audit represents that a service organization has been through an in-depth independent audit of their internal controls activities to assess whether appropriate controls were placed in operation, suitably designed and operating effectively. The audit includes a review of the physical security, computer operations, information security, and data communications. Convio initiated the SAS 70 Type II audit to confirm for its clients that quality control, operational practices, and hosting services meet highest standards and requirements.