Est. read time: 4 minutes

Dear Friend,

Engaging Networks is committed to protecting donor information and maintaining the highest standards of data security. That’s why we are excited to announce a new feature coming to your donation forms in the new year: Enhanced Checkout - Secured by VGS.

As we continue to grow, processing more and more donations each year, it’s vital for Engaging Networks to take the steps needed to remain compliant with the Payment Card Industry Data Security Standard (PCI DSS). As part of this effort, starting in January, we will begin using a third party to tokenize credit card data immediately after it is submitted by donors to your EN-hosted forms on which you accept credit card payments.

We have chosen a respected data security company – Very Good Security (VGS) – as our partner, to significantly enhance the security of credit card transactions made on our clients’ EN-hosted pages. With VGS’ involvement, the way in which we transmit and process credit card data will be more secure, reducing the risk that this data can be stolen.

What do we mean by “Enhanced Checkout”?

There are two pieces of the credit card transaction process that we are improving through the VGS partnership.

The first improvement is on the back end, where the enhanced security happens. VGS will collect and tokenize the donor’s credit card data immediately after a donor submits this data on your EN-hosted form. This is prior to any EN systems interacting with the card data. The new token then gets stored securely in a vault so that, even if Engaging Networks were (hypothetically) breached, the hacker would be unable to access any usable (un-tokenized) credit card information.

The second improvement is on the front end, where new VGS-powered transactional fields will include the following functionalities:

• The Credit Card Number field will automatically identify the card type, and the proper code will be submitted without the need for the credit card type field. We will also display the logo for the card type within the credit card number field.

• The CVV field will automatically update to accept either three digits or four digits, depending on the specific card type.

We are excited to introduce this new functionality as a built-in feature of Engaging Networks, so that clients can benefit from it without having to do any custom coding.

What must clients do?

• Update the Credit Card Number and CVV fields on all live/active donation pages with the new Field Type of “Token”.

• Update any API calls that pass credit card data to use new endpoints that go through VGS.

• Any clients using Worldpay or RSM will also need to whitelist additional IP addresses in their dashboard.

What is the timeline?

• January 12th, 2024: Clients can start updating pages that process credit card transactions.

• March 1st, 2024: All clients must use the updated Credit Card and CVV fields on all pages that are actively processing credit card transactions.

What will Engaging Networks help with?

• Any pages that are not updated to the new fields as of March 1st, 2024 will be automatically updated to use the new “token” field type for the CC number and CVV fields.

• We will provide resources to help fix any common UI issues that we find while testing.

• If needed, EN can recruit Accredited Partners to help our clients with this transition, to make sure that your donation forms look right.

• EN will update the fields on the Free & Flexible templates, as well as on the Accessible-ready templates, that are provided free of charge to all of our clients.

Additional information can be found in the documentation on our Supportal.

We will reach out individually to our partners, payment gateways, and to any clients who will need the new API endpoints and IP addresses. We will also be doing some testing throughout November to determine the level of impact this might have on forms that use custom code around the credit card fields.

We are excited about this update, and we hope you are too. You will be hearing more from us in the coming weeks, as we approach the New Year. In the meantime, if you have any questions or concerns, please reach out to your Account Success Manager. We are here to help!