Case studies
Dalhousie University simplifies PCI compliance and protects payment data with TouchNet
Not many people would think of a university as a hub for merchants, but with nearly 100 different entities processing payments, Dalhousie University operates much like a small city.
From dining services to retail, ensuring PCI compliance across that small city is no small task. With the campus’ multiple merchants processing payments in different ways, maintaining security, tracking compliance statuses and managing regular documentation can quickly become overwhelming. Here’s how Dalhousie University simplified everything.
When business analyst Kristopher Whidden first arrived at Dalhousie — one of Canada’s top-rated public universities — he quickly realized that the department was missing a clear understanding of who those merchants were and how they were handling payments.
Most critically, he had no knowledge of where each merchant stood in terms of compliance.
Step one was getting to know those merchants’ activities and processes, but even then, keeping track of them and their compliance status was a significant challenge. This was partly due to the volume, but more so the manual processes they relied on.
Without a centralized system, Dalhousie University faced challenges in monitoring merchant activities, completing self-assessment questionnaires (SAQs) and reducing the administrative burden on staff. They needed a solution that would both simplify compliance and enhance payment security across campus — and they needed it fast.
“PCI compliance is so important because we may lose our ability to process payments if we don't get in line with it.”
— Kristopher Widden Business Analyst at Dalhousie University
A smarter, simpler path to compliance
To create a more efficient and transparent compliance process, Dalhousie University implemented TouchNet’s PCI Services. With this solution, they have gained:
- A centralized compliance portal that enables merchant grouping by payment stream and offers an easy way to track and monitor their compliance statuses.
- Proactive compliance management, thanks to automated alerts and email notifications that help Whidden’s team stay ahead of deadlines and maintain ongoing compliance.
- User-friendly tools that translate complex PCI requirements into clear, actionable steps for both technical and non-technical users.
- Smart SAQs that assist in reducing the number of questions they have to complete to stay compliant, versus complex SAQ D’s (Self-Assessment Questionnaire D).
- A white-glove experience with hands-on support from dedicated compliance experts.
“The TouchNet compliance portal is where I spend most of my time. I know it has all of the information and guidance I need — and translated into layman’s terms.”
— Kristopher Widden Business Analyst at Dalhousie University
From compliance chaos to confidence
Thanks to TouchNet, Dalhousie University has transformed its approach to PCI compliance. They have a clear path to protecting sensitive personal and financial data, while significantly reducing the time and effort required for compliance management.
Now, compliance is no longer a burden — there’s a seamless process that ensures security while freeing up the university’s valuable time and resources.
Case studies
By continuing to use the website, you acknowledge your receipt and acceptance of the updated Privacy Notice.