PCI DSS Compliance
Solara Trade Group LTD is committed to the security of your payment card data. This statement describes our compliance posture, controls, and responsibilities under the PCI Data Security Standard.
Overview & Commitment
Solara Trade Group LTD ("we," "our," or "us") takes the security of payment card data seriously. We are committed to maintaining compliance with the Payment Card Industry Data Security Standard (PCI DSS) to protect our customers' cardholder data during every transaction processed through our platform.
Our payment infrastructure is designed so that cardholder data never touches our servers. All payment processing is handled by Stripe, Inc., a PCI DSS Level 1 certified service provider — the highest level of certification available in the payments industry.
This statement was last reviewed and updated in 2026 and reflects our current compliance posture. We review and update our compliance program annually and after any significant changes to our payment environment.
Scope & SAQ Type
Because Solara Trade Group LTD uses Stripe's hosted payment fields (Stripe Elements / Stripe.js) to collect payment card data, cardholder data is entered directly into Stripe's secure environment. Our systems never receive, transmit, or store raw card numbers, CVV codes, or magnetic stripe data.
This architecture qualifies us for Self-Assessment Questionnaire A (SAQ A) — the simplest PCI DSS compliance pathway — which applies to merchants that fully outsource all cardholder data functions to PCI DSS compliant third-party service providers.
Security Controls
We maintain the following security controls as part of our PCI DSS SAQ A compliance and overall security program:
Cardholder Data
Solara Trade Group LTD does not store, process, or transmit raw cardholder data on our systems. Specifically:
- No card numbers stored: Primary Account Numbers (PANs) are never written to our databases, logs, or any storage medium.
- No CVV/CVC stored: Card verification values are never stored, in any format, as required by PCI DSS.
- No magnetic stripe data: Full track data is never captured, stored, or transmitted by our systems.
- Tokens only: We store Stripe-issued payment tokens, which cannot be reverse-engineered to obtain card numbers and are useless to attackers.
- Encrypted transmission: All communications between our platform and Stripe use industry-standard TLS encryption.
Third-Party Vendors
We maintain a list of PCI DSS compliant third-party service providers and verify their compliance status annually. Key vendors include:
- Stripe, Inc.: Our primary payment processor. Stripe is a PCI DSS Level 1 Service Provider — the highest certification level — and is listed on Visa's Global Registry of Service Providers. Stripe handles all card data collection, transmission, and processing. View Stripe's security documentation →
- Hosting Infrastructure: Our web hosting environment is operated through reputable providers with documented security programs. We ensure our hosting configuration meets applicable PCI DSS requirements for network security and access controls.
- Service Provider Agreements: All third-party vendors with access to our systems or data are required to maintain appropriate security standards and execute data processing agreements where applicable.
Incident Response
Solara Trade Group LTD maintains a documented incident response plan for potential security incidents, including those that may involve payment card data. In the event of a suspected or confirmed breach:
Shared Responsibilities
PCI DSS compliance is a shared responsibility. Here is a summary of responsibilities between Solara Trade Group LTD and Stripe:
- Stripe's Responsibilities: Securing card data collection, encryption, transmission, storage, and processing. Maintaining PCI DSS Level 1 certification. Providing SAQ A eligibility documentation for qualifying merchants.
- Solara's Responsibilities: Implementing Stripe correctly using official libraries (Stripe.js / Stripe Elements). Maintaining secure website and server infrastructure. Restricting access to our systems. Completing annual SAQ A. Training staff on security awareness.
- Your Responsibilities as a Customer: Keeping your account credentials secure and confidential. Promptly reporting any suspected unauthorized account activity to us at info@solaratrade.com.
Contact & Reporting
To report a security concern, suspected breach, or to ask questions about our PCI compliance program, please contact us: