The Forms and Form Center modules cannot contain sensitive information, per PCI Compliance regulations.
If you require the ability to save and transmit sensitive payment data, our ePayment module is PCI-compliant, as it utilizes third-party hosts to secure sensitive data. However, it will not collect other non-payment-related sensitive data, such as Social Security Numbers.
If you do secure sensitive information and are found to be non-compliant with PCI regulations, CivicPlus will need to manually purge all collected form submissions with the identified form(s).
If you would like a record of all data from the form before we purge its contents, please download and/or export the form submissions within two business days. After, CivicPlus will permanently purge all information from the form(s).