How secure is WorldPay?

WorldPay uses state of the art security tools and techniques, both proprietary and unique, to ensure that you and your shopper are protected against what is nowadays a virtually non-existent risk. Our systems also have inbuilt system redundancy and fault tolerance, to provide you with a virtually uninterrupted service 24 hours a day, seven days a week. Our systems have evolved over many years and throughout our history we have continuously sought and gained bank approval for our systems.

If the shopper keys in their card details at home or in the office, surely they are not encrypted until after they arrive at the WorldPay system?

Using industry standard SSL, Thawte and WorldPay unique encryption systems, this is not actually the case. When the shopper fills in the payment form and clicks the submit button, their details are not sent straight away. What actually happens is that a secure link is set up between the shopper's browser and WorldPay and an encryption code is requested and received, which then wraps the order and transaction details before leaving the shoppers premises. To see a fuller example of this in action, please click here.

Will I need to arrange secure server facilities for my web site?

No, WorldPay provides all the facilities you need to pass transactions securely over the internet.

What security measures must we undertake for our systems to be acceptable to a processing bank?

By working with WorldPay, who will authorise you for use of payment processing facilities online, which includes a QA check of your site, no further bank approval is necessary.

Can I FTP to the secure server?

No, to protect our systems and customers peace of mind, FTP is not allowed to the secure server.

What level of encryption do you have on the WorldPay server?

WorldPay use Thawte 2048 bit encryption systems. At the browser 128 Bit SSL is used.

Why is the testing/QA process so extensive?

This process ensures that integrity is maintained at your end of the transaction process, and to ensure that integration (if you have carried this out yourself rather than using a pre-integrated system such as Click and Build) has been carried out correctly. The whole process has been designed to ensure that no problems occur when you launch your site, reducing the risk of chargebacks etc.

Can I host Click and Build on my own server?

Yes, Click and Build was designed so that it can be housed on any server, regardless of what it is. In addition to the more mainstream UNIX and NT servers, we also have live sites operating OS2 and Mac operating systems.

How do I integrate my web site to WorldPay?

If you are not using a pre-integrated solution, such as Click and Build, you will receive technical documentation and access to our technical support team in order to assist you with this process.

Do I need to know HTML?

If you are not using Click and Build, this may be necessary if you are using a third party product. It will be essential if you are building your own store. With Click and Build, any skill level is accommodated, and novice users can build their own stores with ease.

Where can I find a good HTML resource?

If required, Click and Build's design consultancy team can assist you.

Does each customer get their own CGI-BIN?

Click and Build, in combination with WorldPay, precludes the need for a CGI-BIN.

Do WorldPay use SET?

WorldPay does not use SET as it is not an international standard. However, we do utilise our own variant of this to ensure our clients peace of mind.

Can I use any ISP to connect to WorldPay?

Yes, connection to WorldPay takes place using the industry standard HTTP or HTTPS via your browser.

I am building a database of products, what format should the data be in?

Dependent upon the store you will be using to advertise your products, the format could vary enormously. With Click and Build, probably the easiest, cheapest method is to build your database in either Excel or Lotus 123.

What is a digital certificate?

A digital certificate is an electronic document that is passed between a browser and a server, in order to verify the identity of the senders identity.

What factors affect the speed of my site?

There are many factors that could affect the speed of your site, for example the speed of the visitor's modem, the power of the host server, the size of your catalogue, the size of the images within your catalogue, the method of searching for goods etc.

In what format will I receive order information?

WorldPay can dispatch confirmatory order information in whichever format you require.

Does Click and Build require me to purchase any database software licences?

No, Click and Build comes supplied with its own database, reducing your purchase costs dramatically.

Can WorldPay handle multiple simultaneous transactions?

Yes, we have many machines that handle our transactions, each with their own secure connections to our processing banks. Should any individual machine be busy when your transaction request arrives, the next available machine will be used. This enables us to process any number of transactions quickly regardless of the number arriving for processing.

How do we feed the information from our shopping system to the payment page, and vice versa?

A variety of methods could be used, each of which is laid out in our integration guides. Note that if you are using a pre-integrated system, such as Click and Build, this issue does not arise.

What technical support will be available?

For users of Click and Build, technical support in the conventional sense is not required, and is restricted to design support only. For clients developing their own systems, integration documentation and technical support are both provided by WorldPay.