Can I upload a credit card statement in the imaging system?

Audience/Target Users

  • Faculty
  • Staff

Summary

No, you cannot upload credit or debit card statements or any document containing Cardholder Data (CHD) into the imaging system. Per Payment Card Industry Data Security Standards (PCI DSS) and Charlotte policies, no cardholder data may be stored in the system. All credit or debit card information must be physically or electronically redacted from a document before you scan or import it into the imaging system.

Important Notes or Exceptions

  • What is Cardholder Data (CHD)? CHD is any personally identifiable data linked to a cardholder. This includes:
    • Primary Account Number (PAN) printed on the front or back of the card.
    • Sensitive Authentication Data (SAD), such as security/validation codes, magnetic-stripe data, PINs, and PIN blocks.
  • Redaction Requirement: You must completely black out or permanently obscure all CHD before uploading any document.

Contact Information

If you have questions about document imaging or redacting data, please contact the Service Desk.  For PCI compliance questions, contact Merchant Services.