Requirements for call recording software to comply with PCI-DSS

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard used to handle credit cards info. 

PCI DSS is a standard for businesses with guidance for software developers producing applications used to store and process cardholder data.

So, if you’re processing cardholder data, then you’d better be sure that the call recording software is not a blocker for your company to comply with PCI DSS.

Here is the list of features you might want to check:

• Data transmitted across the solution components network is protected using SRTP with AES-256 keys.
  
• Granular role-based access control.
  
• Secured access to applications with domain authentication.
  
• UI and API to pause and resume call recording to avoid recording card info.
  
• Automatic disconnection of an idle user.           
  
• User audit trail to log access to recordings.      
  
• Application executables are digitally signed.       
  
• Web app interfaces are securely available over TLS 1.2.      
  
• Media files are encrypted prior to saving on the storage.