Privacy

Forter is PCI DSS Level 1 certified and does not collect the full PAN.

The cartridge excludes a fixed set of sensitive fields from the data it extracts and sends to Forter, including creditCardNumber, creditCardToken, bank account numbers, stored credentials, wallet, and addressBook data.

The cartridge sends Forter order, customer, and payment data for fraud decisioning, as well as behavioral and device signals from the device fingerprint snippet. If you use Forter Account Protection, it also sends login, sign-up, and profile-change events.

See How Order Data Is Built and Mapped for what's included in the order payload, Device Fingerprint Snippet for what the client-side snippet collects, and Accounts Configuration for the account-protection data flow.

To handle data subject access or deletion requests, see Data Privacy.