PCI Credit Card Field Changes: FAQs

What exactly is happening on 3/27/2019?

Formstack will be discontinuing the old credit card field block onMarch 27th, 2019. When the old credit card field is removed, historical data collected from that field will also be removed. If this data is needed it will need to be exported from Formstack beforeMarch 27th, 2019. Learn more about the steps you may need to take to convert your form here.

 

Am I able to change the field before 3/27/2019?

Yes, you are free to make any changes to your Form or payment process before the March 27th deadline. We do recommend being fully aware of these changes and potential impact before making any changes though.

 

What is the 90-day window and how does this impact my data?

Should you need the full credit card information at a later time, you will have the option to store this information up to 90-days from the date that the submission was received in your submissions table so long as the form has encryption enabled and no payment processors have been added to the form. After 90-days, this information will automatically be purged from your submissions. Also, note that this functionality is not available by default and must be enabled by contacting support for access.

 

If I don't change the Credit Card field by 3/27/2019, will the system do this automatically for us?

Yes, we will attempt to remove all old Credit Card fields from forms and replace this with the new Credit Card field. If we are unable to detect fields to delete then we will notify the Account Owner so that they may take the appropriate action(s). Our recommendation is to update your forms prior to the deadline. Note: Any Forms containing Javascript snippets may not be eligible for the automatic field updates. In those cases, we will notify Account Owners regarding the affected forms and fields.

 

Is there a charge if Formstack updates the credit card fields automatically on March 27th?

No, if your Forms go through the automatic change-over, this will occur in your Account and across all your Forms at no-charge.

 

To clarify, you can only store credit card information for 90-days total in Formstack?

Should you need the full credit card information at a later time, you will have the option to store this information up to 90-days in your submissions page so long as the form has encryption enabled and no payment processors have been added to the form. After 90-days, this information will automatically be purged from your submissions.

 

How does this affect recurring payments?

Changes to the data saved against Credit Card fields will impact all payment processor configurations as well as one-time and recurring payment cycles. The data saved and handling of that data within your third-party payment processor, once it is passed from your Form, will not be impacted by Formstack.

 

The new credit card is not listed under my build options. How can I access this?

If you are not seeing these options available in your Account, please contact the Formstack Support Team.

 

If my Credit Card fields already show as the new single field version, does that mean our form has already been updated?

Yes, this indicates that your Forms have been updated however we do still recommend reviewing all expected changes against your Form and payment processes.

 

How do I add the new credit card field if I don't have a payment integration setup?

You may now add the Credit Card field to your forms without a payment integration enabled, however, this field will be disabled on the live form. If you have the temporary Credit Card data storage feature enabled on your account and your Form submissions are encrypted the Credit Card field can be enabled.

 

Will the 90-day access option be available indefinitely?

This may be dependent on your Account configuration. If you are not seeing these options available in your Account or have specific questions on this, please contact the Formstack Support Team.

 

During the 90-day window, can you view the entire credit card number?

During this time, you will have the option to store full credit card information up to 90-days in your submission table so long as the form has encryption enabled and no payment processors have been added to the form. Please note: Once a Credit Card number is processed externally, it is the responsibility of Form/Account owners to mark the data as 'Processed' so that it may be deleted as soon as possible.

 

What are all the available credit card processor integrations through Formstack?

All available integrated payment processors are available for review in our side-by-side comparison table.

 

We have some archived Forms; should we update those now or can we wait until we need them again?

While this is not required, we recommend updating or reviewing any/all Forms that may be used now or in the future to confirm that the Form settings and payment configurations have been properly prepared.

 

If you use an integration (ex., Stripe) will submission data be lost through that separate service (ex., Stripe) after 90 days?

No, we do not have the ability to access or delete data sent to third-party systems, therefore, any data sent to your payment processors will not be affected by these changes. However, your payment processor may have their own rules about how long credit card data can be stored in their system. 

 

Will all data be deleted after 90-days or after 3/27/2019 or just the credit card information?

Only Credit Card data/fields will be impacted by these adjustments. Other submission data such as Name, Email, Address, and any non-payment fields will not be impacted or altered.

 

Where can I find a list of all my Forms that still have the old credit card field in them?

To access a list of impacted Forms, log into your Formstack Account > Click on the Dashboard tab. If you have Forms that require an update, you will see a banner along the top of this page providing information and the call-to-action for reviewing all forms and making the necessary adjustments. Please note: if you do not have Forms/Fields that require an update, you will not see this banner in your Account Dashboard page.

 

Is there an opportunity to save last four of the Credit Card and Expiration date after the 90-days?

Yes, Card Holder Data will be sanitized throughout the app. Only the last 4 digits of the credit card number will be displayed in submissions, in emails (even with PGP encryption enabled), and custom submit messages.‚Äč

 

If I still have V2 Forms and need to upgrade to V3, how can I ensure that the form renders properly on my website?

The new credit card field is not supported on V2 Forms. Please convert your form in order to continue processing payments. If you have V2 Forms with Credit Card fields, the rendering of those Forms may be impacted therefore we highly recommend reviewing your V2 Forms and making any necessary changes prior to the March 27th deadline. The biggest potential impact here will be the visual appearance of Credit Card fields moving from two or three field inputs, down to one field. To prepare your V2 forms for these changes, please update your Forms to V3, review the Credit Card field changes and re-embed or make site/page adjustments as needed. To see more on migrating from V2 to V3 forms, please click here!

 

 

 

 

 

Was this article helpful?
2 out of 3 found this helpful

Comments

0 comments

Please sign in to leave a comment.