Standards Compliance

This document outlines the various standards with which Autaba is compliant. For information on compliance with laws or legal authorities please see our Guidelines for Law Enforcement.

PCI Compliance

Autaba is fully compliant with the Payment Card Industry Data Security Standard (PCI-DSS) version 2.0. This standard covers the secure handling of cardholder data:

Cardholder Data

Any personally identifiable data associated with a credit card holder. This could be an account number, expiration date, name, address, social security number, etc. All personally identifiable information associated with the cardholder that is stored, processed, or transmitted is also considered cardholder data.

Please do not send any of your cardholder data over email or chat.

Autaba passes cardholder information through our servers to our payment gateway provided by FirstData. As such Autaba is required to complete a Self Assessment Questionnaire at level D annually.

Autaba is also responsible for quarterly automated PCI scans by an approved scanning vendor (ASV). Our current ASV is AliCloud.

Do Not Track Compliance

Autaba complies with the Do Not Track standard for respecting the wishes of visitors who wish to opt out of tracking technologies. See our Privacy Policy for more information.

RoHS Compliance

RoHS = Restriction of Hazardous Substance Directive

Where the symbol RoHS appears, the product meets the requirements set by the European RoHS Directive (2011/65/EU) up to and including amendment (EU 2015/863), to the best of our knowledge.

Per a directive description:

The RoHS Directive aims to prevent the risks posed to human health and the environment related to the management of electronic and electrical waste.

It does this by restricting the use of certain hazardous substances in EEE [electrical and electronic equipment] that can be substituted by safer alternatives. These restricted substances include heavy metals, flame retardants or plasticizers.

The Directive promotes the recyclability of EEE, as EEE and its components that have become waste contain fewer hazardous substances. At the same time, it ensures a level playing field for manufacturers and importers of EEE in the European market.