Security and safety

Q: Is Omella PCI Compliant?

Yes, Omella is PCI compliant under "PCI validation: SAQ A". We utilize Stripe Elements technology which has financial input fields that are done securely in Stripe's iframe. Stripe (https://stripe.com/docs/security) is certified as a PCI Level 1 Service Provider (http://www.visa.com/splisting/searchGrsp.do?companyNameCriteria=stripe,%20inc). This is the most stringent level of certification available in the payments industry. Omella uses Stripe’s (https://stripe.com/) Elements technology, which has financial input fields that are secured in Stripe's iframe. Payment data, including card numbers, are sent directly to Stripe and never reaches our internal servers. Omella triggers new payments based on the Stripe’s customer identifier and its payment methods. Therefore, Omella does not have any record of the payer’s card number in our database and logs. That means hackers will never get sensitive card or bank information from us. The transmission between the payers, the Omella page, and Stripe is encrypted using 256bit SSL/TLS. Stripe is one of the most secure and trusted payment providers. It is used by Twitter, Shopify, Kickstarter, and Lyft.

Q: Is SSL required when embedding my Omella page?

The short answer is yes, SSL is required. While Omella pages are SSL/TLS secured themselves, your site that hosts the page embed should also be SSL secured. There are two reasons for this: • If the parent site is not SSL/TLS secured, it might be susceptible to a man-in-the middle attack (http://security.stackexchange.com/questions/38317/specific-risks-of-embedding-an-https-iframe-in-an-http-page). • Your payers will be more likely to pay if they see the SSL/TLS lock seal in their browser. The easiest way to install SSL is to contact your web host. Some web hosts such as Squarespace, WIX, and DreamHost offer free SSL. If you are just linking to your https://omella.com/your-page page, you do not need to install SSL because the page is fully SSL secured. Another way to install SSL is to use CloudFlare's (https://cloudflare.com/) CDN which provides a free SSL layer. Cloudflare installation is more complicated. Please consult someone who is an expert with DNS to do this. Your site may experience downtime if Cloudflare is not configured correctly.

Q: How does Omella keep payment data secure?

Omella uses Stripe’s (https://stripe.com/) Elements technology, which has financial input fields that are secured in Stripe's iframe. Payment data, including card numbers, are sent directly to Stripe and never reaches our internal servers. Omella triggers new payments based on the Stripe’s customer identifier and its payment methods. Therefore, Omella does not have any record of the payer’s card number in our database and logs. That means hackers will never get sensitive card or bank information from us. The transmission between the payers, the Omella page, and Stripe is encrypted using 256bit SSL/TLS. Stripe is one of the most secure and trusted payment providers. It is used by Twitter, Shopify, Kickstarter, and Lyft.

Q: How does Omella process bank transfer payments?

We use Stripe to process Bank transfer payments through their authentication flow that consists of four steps: agreement to terms and conditions, bank selection, entering login credentials and choosing the account you want to link. This Open Authentication connection is a way for you to log in directly to your financial institution without sharing your login credentials with Stripe or Omella. Omella does not have any record of login credentials. That means hackers will never get sensitive card or bank login credentials from us. The transmission between the payers, the Omella page, and Stripe is encrypted using 256bit SSL/TLS. Stripe is one of the most secure and trusted payment providers. It is used by Twitter, Shopify, Kickstarter, and Lyft.

Omella provides an easy way for organizations such as schools, districts, nonprofits and others, to collect payments and information. Safety is important - we’ll take care of data integrity and security so you can focus on your mission.

Omella protects your data by maintaining the highest level of security. Along with our partners, we adhere to the following industry safety and security standards intended to protect payment data from unauthorized access and potential misuse.

🔒 Omella is required by law to protect personally identifiable information and complies with SOPPA, FERPA, COPPA andEdLaw2D

🔒 Omella pages are SSL/TLS secured

🔒 Omella is PCI compliant

🔒 Payment data is sent directly to Stripe and never reaches Omella’s internal servers

🔒 Omella does not have access to payers’ credit card information or online banking credentials

‍

You read more about how we handle security here and review our Data Security Privacy Plan here.

Up next

How can a payer request a refund?

Payers can request a refund with 1 click from their digital receipt. It’s up to you to approve or reject the request.

Choosing the Best Check-In Method for Your Event

This article guides you through three different types of check-ins, highlighting their key differences and the best use cases for each.

Ticketed Dances FAQ

In this article, we’ll walk you through the most frequently asked questions about Ticketed Dances to help you prepare ahead of the big day!

General Overview

A quick overview about Omella: video tutorials and one page PDF’s you can easily share.

FAQs

Is Omella PCI Compliant?

Is SSL required when embedding my Omella page?

How does Omella keep payment data secure?

How does Omella process bank transfer payments?

You and your referrer will each get a free card reader once your organization collects $1,000

Security and safety

How can a payer request a refund?

Related articles

Choosing the Best Check-In Method for Your Event

Ticketed Dances FAQ

General Overview

FAQs

That was easy!

Resources

Omella for

Company