Never collect or store card security codes

Context

Storing a card's security code after checkout violates industry card-security rules, even if it is encrypted.

Decision

Pikt does not collect, transmit, or store card security codes. Any future checkout assist must use secure payment tokens from your card network — never a saved security code.

Consequences

• Pikt avoids the highest-risk category of card-data handling.
• No security codes are stored that could be stolen in a breach.
• Checkout assist, if expanded later, will rely on tokenization rather than secret storage.