Sponsors

Award winners

For more information please visit https://www.advantio.com/


Syntec has provided voice related services to global contact centers since 1998 and has been a PCI DSS Level 1 service provider since 2011. We have a team of experts who combine long-standing telecom experience with a track record of innovation in contact center technology. Our award-winning CardEasy solution significantly reduces PCI DSS scope for contact center environments as well as risk, compliance burden and cost related to card payments processed by phone, email, webchat, SMS and social media channels.


For more information please visit https://cardstream.com/


For more information please visit https://www.comforte.com/


Eckoh provides the ultimate payment security suite for contact centres.

Whether you’re operating remote, home-based agents and/or office-based teams, our flexible and robust cloud solutions can quickly help you meet your PCI DSS compliance requirements.

Eckoh has earned the trust of major brands around the world by securing key customer contact channels such as phone transactions with contact centre agents or IVR, to payments via SMS, Chat, Chatbot, messaging, web portals and apps.

As a PCI DSS compliant Level One Service Provider since 2010, we have a 100% successful deployment record and hold several patents that testify to our unique payment security technology.

Scalable, flexible and secure cloud solutions that:

  • Significantly reduce fraud risk
  • Maintain payment security in cloud environments
  • Remove the burden of PCI DSS compliance from your major customer contact channels
  • Protect phone, web, IVR, Chat, Chatbot, messaging and social media payments
  • Can be deployed remotely, onsite, cloud based or hosted
  • Take any card payments, Apple Pay, Google Pay, PayPal, Pay by Bank app or Pay by Link

If you’d like to talk to us about how we can help transform your contact centre payment security, then visit our booth, get in touch or call 0330 404 7330.

Follow us on LinkedInTwitterFacebook or YouTube or visit www.eckoh.com.


Established in 2000, ECSC Group plc is the UK's longest running, 'full service' information and cyber security service provider.

ECSC offer a complete range of cyber security solutions and services to all sectors. Our ever-expanding client list ranges from e-commerce start-ups to global organisations, and our consultative, business-focused approach has led us to proudly count 10% of the FTSE 100 among our clients.

All of our consultants are highly qualified: our minimum qualification is the well respected Certified Information Systems Security Professional (CISSP). All of our PCI specialists are Payment Card Industry Qualified Security Assessors (PCI QSA), registered with the PCI SCC (Council) since 2007 with over 10 years’ experience individually. Not only this but our QSA’s also have ISO27001 Lead Auditor qualifications.

As one of the UK’s first ever PCI Managed Services Provider, our aim is to support any organisation regardless of size to achieve PCI DSS compliance and effective cybersecurity by providing expert, vendor independent, technical and security advice.

ECSC runs 24/7/365 managed cyber security services through our UK and Australian Security Operations Centres, combined with a range of consulting and cyber security testing services.

We are proud of our almost 20-year history, unrivalled industry reputation, and AIM market listing.


Gala Technology are an award winning company specialising in developing secure digital payment solutions predominately for the card not present (CNP) MOTO, Web Chat and Social Media channels. Their flagship product is SOTpay, winner of the 'Security Innovation Of The Year'​ at the National UK IT awards.

SOTpay is a unique piece of cloud based, PCI DSS certified software, which is quick and cost effective to deploy and is set to revolutionise the way businesses handle telephone and card not present transactions globally.

With card fraud at £566m in 2017 in the UK alone, pressure on business leaders from criminals has never been higher, hence the ongoing PCI DSS and GDPR requirements that organisations of any size must comply with or face hefty chargebacks, penalties and reputational damage.

SOTpay negates chargebacks associated with fraudulent card not present transactions and supports the business towards PCI DSS compliance by ensuring that no sensitive data enters the merchants environment and telephone agents do not handle or store any card data that may be exploited.

An extra layer of security on all telephone transactions, verifies the identity of the customer, whilst offering a familiar payment journey, thus increasing transaction acceptance, reducing processing costs, and even enables third party delivery solutions Being a cloud based solution and with the potential to work seamlessly with all payment service providers, SOTpay is simple to deploy into your organisation, without the costly expense of hardware, or the time consuming amendments to your existing telephony solution, regularly found with IVR or DTMF products.

http://www.sotpay.co.uk/


HCE Service Limited Vision & Mission
 
We deliver innovative, secure and exciting mobile HCE (host card emulation) tokenization services to our card issuing customers and partners globally with the ultimate aim that their consumers can use SWIM modules on smartphones capable of end to end secure cloud messaging and off-line contactless NFC mobile payments at Points of Sales.
 
Securing mobile apps is now as easy as to SWIM…
 
At HCEservice.com, through our innovative and state-of-the-art hosted software as a service (SaaS) infrastructure, we service retail enterprises, transport, telecom, local government, and banks and other financial card/token-issuer customers.
 
Our SWIM (Software Wireless Identity Module) mobile app service is the major security component in our customers’ smartphone payment and messaging infrastructures. SWIM Mobile Apps provide strong cryptographic security to a wide range of applications and services on mobile devices such as Android. Our hosted wireless MAP (Mobile Application Platform) wallet server is the most advanced HCE EMV card/token issuance payment platform for most card/token issuers!
 
We manage for our customers SWIM Mobile Apps on consumer NFC (Near Field Communication) smartphones, which securely store card tokens as an alternative to carrying physical cards. Our unique business proposition is to provide SaaS (Software as a Service) HCE (Host Card Emulation) services to card issuers in sectors from finance, telecom, retail to transit. 
 
1. We offer application hosting to card issuers wishing to issue HCE tokens and process HCE payments. 
2. We customise fast and secure mobile payment ‘HCE token’ apps to our issuers’ requirements.
3. We work with Transport, Telecom and Retail Enterprises, Local Government, and importantly Bank Card Issuers.
4. We give high priority to security compliance including PCI-DSS compliance.
5. We provide greater than 99.95% uptime as typically expected within the financial IT industry. 
 
For further information please see: hceservice.com/

PCI Pal is a leading provider of SaaS solutions that empower companies to take payments securely, adhere to strict industry governance, and remove their business from the significant risks posed by non-compliance and data loss. 

Our mission at PCI Pal is to safeguard reputation and trust by providing our customers with secure Cardholder Not Present payment solutions for contact centres and businesses.

Our products secure payments and data in any business communications environment including voice, chat, social, email, and contact centre.  We are integrated to, and resold by, some of the worlds' leading business communications vendors, as well as major payment service providers. 

The entirety of the product-base is available from our global cloud platform hosted in Amazon Web Services ("AWS"), with regional instances across EMEA, North America, and ANZ.  PCI Pal products can be used by any size organisation globally, and we are proud to work with some of the largest and most respected brands in the world.

For more information visit www.pcipal.com or follow the team on Linkedin: https://www.linkedin.com/company/pci-pal/

 


For more information visit www.pixalert.com


Prism Infosec provides cybersecurity testing and consulting services from its offices in Cheltenham and Liverpool, UK and was established in 2006. The Company has delivered information security consultancy and assessment services to some of the world’s largest organisations. 

Uniquely, Prism Infosec’s consultants possess both business and management focus as well as a broad range of technical skills. Whether delivering advice on cutting edge information security architectural solutions, conducting management control audits, or in-depth technical penetration testing our consultants always deliver a quality end-to-end service.

It is our ethos that our clients work with professional and experienced consultants at all times and customer satisfaction is our number one priority. We always ensure a prompt and efficient service and provide deliverables that can be used effectively by our audience at any level of the business.

Prism Infosec is a Payment Card Industry Qualified Security Assessor Company (QSAC), employing experienced QSAs who always offer pragmatic assessments and commensurate advice and recommendations. Prism Infosec is also a member of CREST, the not for profit organisation that serves the needs of a technical information security marketplace requiring the services of a regulated professional services industry.

Prism Infosec maintains an ISO9001:2015 certified (UKAS-accredited) Quality Management System (QMS) which ensures that quality is at the heart of all our service offerings and client relationships. 

The Company prides itself on the delivery of a high standard of projects to its customers, across a number of our service offerings: -

  • Pragmatic PCI QSA assessments;
  • Experienced and practical advice on compliance with standards such as the PCI DSS and ISO27001;
  • Enterprise application and infrastructure penetration testing;
  • Bespoke red team engagements;
  • Mobile application reviews (iOS, Android, Blackberry, Windows Phone);
  • Social engineering, phishing campaigns and simulated cyber-attacks;
  • Cloud security assessments and advice; and
  • Risk assessments.

 

 


Semafone provides data security and multi-channel compliance solutions for secure and seamless customer experiences to all businesses accepting payments; enabling them to collect personal data securely across all channels – including the telephone, webchat, social media, email SMS, QR codes and more. Semafone's patented data capture method collects sensitive information such as payment card or bank details and social security numbers directly from the customer for processing. This prevents personal data from entering the business and IT infrastructure, which protects against the risk of fraud and the associated reputational damage, ensuring compliance with industry regulations such as PCI DSS and GDPR. Semafone’s suite of solutions create a seamless, omnichannel experience that increases sales conversion rates and boosts customer loyalty, while at the same time simplifying compliance. 
 
The company was founded in 2009 and now supports merchants in 26 countries on five continents. Semafone is vertically agnostic and its extensive customer base includes companies such as AO.com, AXA, RNIB, Santander, Sky, TalkTalk, and The British Heart Foundation.


Silver Lining are the largest owner-operator of our own private cloud and in-house developed PCI Service worldwide.

This provides a unique position to allow us to deliver and understand, end-to-end business operations.  As a large UK MSP, we have expertise in designing, implementing and supporting IT, Telecoms, WAN & LAN services, including our own Level 1 PCI-DSS Compliant products.

Silver Lining work in a consultative manner, to ensure not only compliance challenges are met, but operational excellence and business strategies can also be achieved.

Our PCI Services allow our customers to securely process transactions across a variety of channels including telephone, webchat, social media, email and SMS.

Lift your business out of scope in as little as 5 days: 

  • No setup costs*
  • No Transaction Fees
  • Simple Pricing Model
  • Complete Flexibility
  • Private End to End Security
  • Truly Bespoke Solution

Working with our customers, we continually invest into research and development to continually improve and enhance our product offerings. This is all achieved in-house, with no dependencies on 3rd party products.

Understanding that every business is different, our customers range from small, single site start-ups to complex multi-site enterprises and government organisations.

Our privately owned and operated 4th generation cloud infrastructure has enabled us to create bespoke, secure and robust solutions, utilising unified communications and converged IT, offering improved efficiency, reduced running costs and the flexibility to easily upgrade as your business grows.

For more information visit: www.silver-lining.com

 

*Minimum 12 month contract

For more information please visit https://www.silverfort.com/