PAN masking

As soon as Maitre’D is installed and configured for use with integrated card payments, PANs and expiration dates are masked. Essentially, as soon as a payment type is marked as “Electronic Funds Transfer”, the PAN and expiration dates are masked, and it is not possible to configure the system otherwise.

Limiting access to full PANs

Since Maitre’D version 7.08.000.000, all access to full PANs and expiration dates are blocked. While this data is held in encrypted form in File144.dat and File215.dat for the duration of the fiscal day, this information cannot be viewed through reports or otherwise displayed on screen for the user to see. In earlier versions of Maitre’D, a report called Media by Media (Plain Folios) used to allow certain types of users to see full PANs and expiration dates. This report has been removed, and the files used by that report no longer hold full PANs or expirations dates.

Configuration

No special configuration is required. There is actually no way to configure Maitre’D to cause it to display full PANs or expiration dates. As explained previously, PANs and expiration dates are saved in encrypted form in File144.dat and File215.dat for the current fiscal day only. No tools are provided to display this information to the users. The only business reason that warrants saving this information is to be able to finalize pre-authorizations or void transactions without having the actual credit card in hand. There is absolutely no valid business reason to keep cardholder data any longer.