- OOBAXS does not store, process, or transmit any cardholder data on premises.
- OOBAXS relies entirely on third party service providers to handle these functions.
- The third party service providers handling storage, processing, and/or transmission of cardholder data is confirmed to be PCI DSS compliant.
- OOBAXS retains only paper reports or receipts with minimal cardholder data, and such documents do NOT contain an credit or debit card info.
- OOBAXS does not store any cardholder data in electronic format.