LEGAL

Security & PCI Compliance

Last updated: September 2026

How We Protect Your Data

Guru Pay places merchants with processors and gateways that maintain PCI DSS compliance, the payment card industry’s standard for securely handling cardholder data.
Card data passed through the systems we recommend is encrypted in transit and, where supported, tokenized so that raw card numbers are never stored on your point-of-sale system.

Your Responsibilities

Maintaining PCI compliance is a shared responsibility. We help you select hardware and software that make compliance straightforward, and your Guru can point you to the annual self-assessment questionnaire required for your account type.
Never email or text full card numbers, and report any suspected data breach to your Guru immediately so we can coordinate with your processor.

Questions About Compliance?

Your Guru can walk you through what applies to your account.
Talk to a Guru