Do PCI-DSS 4.0 requirements apply to FinDock Giving Pages?

No, PCI-DSS 4.0 control 6.4.3 does not apply to FinDock Giving Pages.

Giving Pages do not embed payment processor forms (e.g., via iframe) and do not handle credit card data directly. Therefore, they are not affected by this requirement.

As per PCI-DSS guidance, script management requirements under control 6.4.3 only apply when embedding a third-party payment form. In such cases, the responsibility lies with the payment processor.

Was this page helpful?