Call centres handle card numbers spoken aloud, typed by agents and too often captured in recordings and screens, in Canada and abroad.
These are the issues we see most often in this sector. Each one has a fix.
Card data in recordings
Call recordings and screen captures that contain card numbers bring entire systems into PCI scope.
People and remote work
Agents, supervisors and home-based staff all handle card data, under different conditions.
Client requirements
Your clients are responsible for their card data, so they ask you for proof of compliance.
Hover each card to see how we close the gap.
Get recordings out of scope
Every system that stores a card number must be secured and assessed.
Ubitrak reviews your call flows and recording setup and shows how to reduce scope before the assessment.
Give clients an attestation
Without it, renewals and new contracts stall.
Ubitrak has certified call centres since 2011 and issues the Attestation of Compliance your clients expect.
Prove controls work in practice
Policies alone do not satisfy an assessor.
Penetration tests and a gap assessment show where controls fail before the audit does.
Ubitrak · Audits and certification
A PCI QSA company since 2011, with 80 assessment clients in 7 countries. PCI DSS, Interac, SOC 2 with CPA firms, ISO 27001, ASV scans and penetration tests, all tracked in the Ubitrak Audit Portal.
Accel PCI · Self-serve PCI compliance
A guided web portal that takes merchants to their PCI DSS compliance certificate in six steps, with a pre-filled questionnaire and a clear to-do list. No support hours or surprise charges.
Accel GRC · Governance, risk and compliance
One portal to manage your cybersecurity obligations: Quebec’s privacy law, PCI DSS and your clients’ security requirements. Includes an internal audit report, training and document templates. Built and supported by Montreal experts.
Tell us what you need and when. We’ll tell you what it takes, what it costs and how long it’ll take. No obligation.