Compliance badge
The badge is deliberately text rather than an image: every statement on it is backed by the certificate details below, which you can quote back to us or to your bank.
Certificate details
- Company name
- Zed Web Tech (trading as ZED WEBTECH, SC business registration 251201-1111328), 1615 Miller Rd, Hodges, SC 29653
- Certificate number
- 10202631691401
- Merchant number
- 201100366914
- Classification
- Level 4 merchant — fewer than 20,000 e-commerce card transactions a year
- Assessment
- SAQ A · PCI DSS v4.0.1 — the self-assessment questionnaire for card-not-present merchants that fully outsource cardholder-data functions to PCI DSS validated third parties. Result: Passed
- Approved Scanning Vendor
- SAINT Corporation
- Date completed
- October 31, 2026
- Expiration date
- October 31, 2027 — re-assessed annually and after any change to the checkout, processors or hosting
- Card payment processor
- PCI DSS Level 1 Service Provider
- Scope
- Checkout and order pages on this site and the administration area. No cardholder data is stored, processed or transmitted by our own servers
- Transport security
- TLS 1.2 and 1.3 only; HTTP Strict Transport Security enabled; HTTP requests are redirected to HTTPS
The signed Attestation of Compliance behind this certificate is available to acquiring banks and business customers on request — e-mail FinTech@zedwebtech.com.
How your card is protected
- Card number, expiry and CVV are typed into secure fields that the payment processor serves inside our checkout page. They are tokenised in your browser; the raw card details never reach our servers.
- With PayPal, you pay on PayPal's own pages or in PayPal's card form; we receive only a payment reference and the outcome.
- 3-D Secure (Visa Secure, Mastercard Identity Check, American Express SafeKey) is requested by your bank where it applies.
- Each order records the IP address and time of payment and the processor's fraud signals; unusual orders are reviewed before keys are released.
What we store
Only what is needed to deliver your licence and honour refunds: your name, e-mail address, billing address, the payment reference returned by the processor, the card brand and the last four digits. We never see or store full card numbers, expiry dates or CVV codes. Payment-processor credentials are stored encrypted at rest. See the privacy policy for retention periods and your rights.
Site security
- HTTPS everywhere with HSTS; security headers (content-type sniffing, framing and referrer policies) on every response.
- Administration area protected by password and rate limiting; licence keys are encrypted in the database and decrypted only for the buyer's order page and e-mail.
- Forms carry anti-forgery tokens; order pages are reachable only by a private link sent to the buyer.
- Dependencies and the hosting platform are patched on a regular schedule.
Report a concern
If you believe you have found a security problem on this site, e-mail FinTech@zedwebtech.com with the subject "Security". We acknowledge reports within one business day and will not take action against good-faith researchers. Suspected card fraud on an order: call (839) 273-6762 during Mon–Sat, 9 AM – 6 PM EST.