Intuit compliance

Payment Card Industry

The Payment Card Industry Data Security Standards (PCI DSS) is a proprietary information security standard designed to ensure that companies processing, storing or transmitting payment card information maintain a secure environment. The PCI Software Security Framework (SSF) is a collection of standards and programs for the secure design and development of payment software. PCI applies to credit cards from the major card brands, including Visa, MasterCard, American Express, Discover, and JCB.

Service Organization Control

The American Institute of Certified Public Accountants (AICPA) Service Organization Controls (SOC) reports provide assurance over a service organization’s internal  controls.These reports cover controls relevant to the services provided to user entities (customers), which may include the processing, storage, and transfer of data, as well as the financial transactions and compliance aspects related to those services.

International Standard for Information Security

The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers, and data centers are securely managed. These certifications run for 3 years (renewal audits) and have annual touchpoint audits (surveillance audits).

Voluntary Product Accessibility Template

A Voluntary Product Accessibility Template (VPAT®) is a document that explains how information and communication technology (ICT) products such as software, hardware, electronic content, and support documentation meet (conform to) the Revised 508 Standards for IT accessibility