Sage Pay is the union of Protx, the fastest growing payment service provider (PSP)
and Sage, one of the UK’s most trusted business brands. We offer our 25,000+ customers
a secure payment service for the millions of transactions that we undertake on their behalf
each year.
The philosophy that has driven us since our launch in 2001 is still at the heart
of our business – to give our customers more than they pay for, and to make it really easy
for them to do business. We make the process of accepting payments simpler, faster and
safer for our customers, and consistently give them more for their money – more products
and services and greater safety and security.
We take the time to listen our customers and
quickly respond. Whether your need for online payment is simple
or a completely tailored solution, we believe in delivering an extraordinary customer experience.
Industry standards
As a payment service provider (PSP), thousands of businesses outsource their transaction security to us. It is our top priority to ensure that your customers’ transaction data is kept secure at all times.
System security
Sage Pay’s systems are scanned quarterly by Trustwave which are an independent Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV) for the payment card brands.
Sage pay is also audited annually under the Payment Card Industry Data Security Standards (PCI DSS) and is a fully approved Level 1 payment services provider, which is the highest level of compliance. We are also active members of the PCI Security Standards Council (SSC) that defines card industry global regulation.
Transaction security
All transaction information passed between merchant sites and Sage Pay’s systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to your servers from Sage Pay are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing you pass to Sage Pay’s servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.
Encryption and data storage
Once on our systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data we hold is extremely secure and we are regularly audited by the banks and banking authorities to ensure it remains so.
Links to banks
Sage Pay has multiple private links into the banking network that are completely separate from the Internet and which do not cross any publicly accessible networks. Any cardholder information sent to the banks and any authorisation message coming back is secure and cannot be tampered with.
Internal Security
Entry to Sage Pay is controlled by Iris Scanners, which are the latest and most precise biometric security devices available for identification. As used by chemical plants, airports, police stations, prisons and other facilities where security is paramount. In addition, no one can enter or leave the building without a valid security pass.
Disaster recovery
Sage Pay operates on twin data centres to ensure optimal system security and up-time and has a full disaster recovery and business continuation policy.
Customer service
Sage Pay is passionate about delivering extraordinary service experiences to its customers.
E-commerce is a rapidly expanding industry that does not sleep. Around one fifth of all
transactions we process occur between 8pm to 8am daily, therefore, it is important that we
are there for you whenever you might need us.
We are open 24 hours a day, 7 days a week. We handle around 30,000 queries a month
and believe that service is about providing our customers with options so that they can
chose the method that they prefer to resolve their query.
If you have any comments or suggestions please email our customer services
manager personally at colin.mould@sagepay.com
Telephone & email Support
- Our experienced advisors are available 24/7 to respond to your telephone calls and emails
- There are no automated telephone menu systems and each time you call, you will get
through to an advisor in the UK.
- Our advisors are fully trained on all aspects of the Sage Pay business so that they can
assist with your query efficiently and effectively.
Online support
- Our comprehensive online payment support pages are available for those who prefer to investigate queries themselves.
- Our forum enables customers to network with and assist each other or
simply share their thoughts with a wider audience.
- Customers can also log-on to our monitor page to check the current live status of our systems at any time.
Our customer service promise
Service is all about people. We believe fast access to a friendly, knowledgeable individual who can
answer your query is what our customers want. We build these assumptions on customer feedback
and implementing things that we have enjoyed as customers ourselves.
We employ people with a customer service or industry background that display a great attitude and
desire to work with e-commerce customers. We encourage them to express their personalities and
empower them to make decisions so that you get an extraordinary service experience.
Our customer satisfaction scores improve year on year and the majority of our customer-base
recommends us to their friends and colleagues. However, this is not a reason for complacency
and we will continue to add further value to our service so that you can have complete piece of
mind when trading online.
How it works
Sage Pay Go is a secure payment gateway that enables businesses to accept card payments from their customers via the internet, over the phone or by mail order. Here's how it works:
1. Your customer selects the goods they wish to purchase from your website and enters their order and delivery details.
2. Your customer's credit card details are captured securely by Sage Pay.
3. Your customer will be prompted to enter their Verified by Visa or MasterCard Secure Code password on their card issuer's page (optional).
4. The merchant bank sends the credit card details to your customer’s card issuer who authorises or declines the transaction.
5. The merchant bank then sends the transaction results back to Sage Pay.
6. Sage Pay sends the authorisation results to you and your customer to confirm the results of the transaction.
(The first six steps take 2 - 3 seconds to complete)
Settlement:
7. The funds from all processed transactions are sent to your merchant bank for settlement at the end of each day.
8. Your merchant bank then collects the funds from the card issuer and pays them into your bank account. The delivery of funds into your account varies from bank to bank.
Getting started
It’s easy to get up and running with Sage Pay, just fill in the application form and
we’ll guide you through each step. Once you’ve submitted the form, we’ll perform some
security checks at our end and will be in touch within 24 hours.
Before you start trading online using Sage Pay you might want to think about the following……
How do you want to integrate our payment gateway into your web site?
There are three options for integrating Sage Pay Go and the one you choose will be dependant on how
your website is hosted, the type of shopping cart you have and whether you want to take on the PCI DSS
responsibility.
FORM:
SERVER:
DIRECT:
• More about integration
Are you PCI compliant?
By 30 September 2009 all online merchants will need to be PCI DSS compliant to a certain level. However becoming PCI compliant can be costly, but there are ways to remain firmly PCI compliant and reduce the financial burden.
Sage Pay Go’s Form and Server integration options enable you to take advantage of Sage Pay’s PCI level 1 compliance.
With both Form and Server integration, the payment pages are hosted by Sage Pay so that you are not collecting, storing or transferring any card data. We have also developed inFrame technology for Server integration, where you can fully customize the payment pages.
You will still need to carry out a basic PCI DSS self-assessment, but this is far less costly than becoming fully compliant.
Do you need any bolt-ons?
Sage Pay Go should cover all of your basic needs for trading online, however you may have some specific
requirements, so we’ve designed some bolt-ons to enhance your payments service.
Priority support and account management – perhaps you're processing high volumes of transactions and want the added assurance of a dedicated account manager.
Merchant services – if you don’t yet have a merchant bank account, we can get this set up quickly and
cost effectively.
Premium fraud prevention – If you’re selling luxury items or those susceptible to fraud, you may require more sophisticated rule bases.
PCI DSS compliance — whether you are collecting and transferring card data or not, Sage Pay and PCI security partner Trustwave have a PCI package to suit.
For help and advice you can contact us at anytime by calling 0845 1114455 or emailing support@sagepay.com
Join us
When there are vacancies at Sage Pay, we’ll post them here, but please feel
free to email us at careers@sagepay.com if you’re looking for a career in our
fast-paced industry.
We like working with people who are:
Passionate, agile, approachable, engaging, trustworthy and smart.