PCI Compliance
Erol Toker avatar
Written by Erol Toker
Updated over a week ago

Truly is not PCI compliant, and cannot be used to consume/store credit card information.

However, the following cases are covered to ensure that this is not an issue:

  • PCI Redaction: you can have Truly's transcription engine automatically redact credit card information (along with all other sensitive information) using AWS's redaction features.

  • Pausing Recording: reps can take credit card numbers over the phone if they pause call recording, and you can validate that this practice is in effect by using Transcript Redaction to anonymously detect process violations and remove problematic data from the system.

  • Blind Transfers: reps can redirect calls to a third party system that is set up for collecting credit card information without having Truly record the call.

Did this answer your question?