PCI-DSS: From Compliance to Certification

At Float, we’re committed to protecting the personal and financial data of our customers. Following our recent SOC 2 Type 2 Certification, we are proud to announce that Float is officially PCI-DSS (Payment Card Industry Data Security Standards) certified.

Being PCI-DSS certified means that Float abides by the highest standard of security in the storage, processing, and transmission of cardholder data. While we’ve always been PCI-DSS compliant, our new PCI-DSS certification gives customers an extra layer of validation for the fact that Float protects sensitive data at every level — from employee onboarding to payment processing. 

We worked with a Qualified Security Assessor (QSA), an approved external auditor, to confirm that we comply with the requirements under PCI-DSS and receive our PCI-DSS SAQ D Report & Attestation of Compliance (AOC). 

Float is one of the few Canadian financial technology companies with both certifications, demonstrating our team’s commitment to security at every step of the way (and just another reason to choose Float).

What is PCI-DSS?

For as long as there have been virtual payment systems, there’s been the risk of fraud and data breaches. PCI-DSS was established in 2006 to serve as an international baseline of data security for companies that accept or process payment cards. 

PCI-DSS is the highest level of security standard available to providers like Float. As one of the first Canadian financial technology companies to become PCI DSS certified, Float is leading the charge toward global-standard data security in the corporate cards and spend management space. 

Why PCI-DSS certification matters

Enhanced data security: Our PCI-DSS certification signifies that we have implemented robust security measures to protect payment card information and sensitive authentication data.

Increased trust: Our customers can have more confidence in the security of their transactions, knowing that their financial and personal information is handled with utmost care, per industry best practices.

Industry recognition: Achieving PCI-DSS certification places Float among a select group of organizations around the globe that are recognized for their commitment to data security and compliance.

Leading the way for holistic security

Float is now one of the few financial technology organizations in Canada with both SOC 2 and PCI-DSS certifications, demonstrating our commitment to providing a secure and reliable platform for the businesses we serve. But Float’s commitment to security goes beyond certifications and compliance—we’re working to ensure holistic security when it comes to company spending. 

Over the past few months, Float has released new features to ensure Canadian finance teams have ultimate visibility and proactive control over how, when, and why money is spent across the company:

• MFA and SAML SSO
  • Float offers both Multi-Factor Authentication and SAML Single Sign-on for customers to ensure only authorized users have access to Float accounts
• Float Cards 2.0
  • Issue cards to employees worry-free with new $0 card balances and the ability to create or approve Recurring and Temporary limits
• Merchant Controls
  • Proactively manage spending by limiting card transactions to specific merchant categories
• Reporting
  • Get real-time visibility into company spending with Float’s Reporting feature that allows teams to spot anomalies before it’s too late

Security is an ongoing focus at Float. Stay tuned to see how we’re ensuring that businesses across Canada can confidently rely on Float for their corporate card spend.

Not yet a Float customer? Book a demo with our team here and we can show you how Float can help you control your company’s spending more simply and securely. 

---

Written by