Payment security

Last updated April 12, 20263 min read

How NoCode.shop protects your customers’ payments: PCI DSS compliance via Stripe, SSL encryption, 3D Secure, SEPA mandates, and EU hosting.

NoCode.shop never stores card data

Most important point: no card numbers ever touch NoCode.shop servers. When your customer enters card info, it goes straight to Stripe via an embedded form (Stripe Elements).

NoCode.shop only gets a payment confirmation and a transaction ID. Card data stays exclusively with Stripe.

PCI DSS compliance via Stripe

Stripe is certified PCI DSS Level 1, the highest compliance level in the payment industry. Covers collection, processing, and storage of card data.

By using Stripe, you get this compliance without managing it yourself. Zero PCI DSS steps on your end.

SSL encryption everywhere

All NoCode.shop pages (dashboard, sales pages, checkout) are served over HTTPS with a valid SSL certificate. Data between your customer’s browser and our servers is encrypted.

Strong customer authentication (SCA / 3D Secure)

European regulation (PSD2) requires strong customer authentication (SCA) for online payments. Your customer may get an extra verification step (bank notification, SMS code) during payment.

Stripe handles 3D Secure automatically when the customer’s bank requires it. Nothing to configure on the NoCode.shop side.

SEPA mandates via GoCardless

For SEPA direct debits, GoCardless manages mandate creation and storage. Customer signs an electronic mandate on first payment. GoCardless stores it per SEPA scheme rules.

European hosting

NoCode.shop is hosted on Meteor Galaxy EU West 1 (Ireland). Your business data (orders, customers, products) is stored in the EU. Payment data is held by Stripe and GoCardless, who also have European infrastructure.

FAQ

Is NoCode.shop PCI compliant?
NoCode.shop doesn’t handle card data—Stripe does. Stripe is PCI DSS Level 1 certified, the highest standard. You benefit automatically.
Where is my data stored?
Business data is hosted in the EU (Meteor Galaxy EU West 1, Ireland). Payment data is stored by Stripe and GoCardless on their own secure infrastructure.
Is 3D Secure enabled automatically?
Yes. Stripe triggers 3D Secure when the customer’s bank requires it, per PSD2. Nothing to configure on your end.
What happens in case of fraud?
Stripe has fraud detection (Stripe Radar) that blocks suspicious transactions. If there’s a dispute (chargeback), you’re notified through your Stripe dashboard to provide evidence.
Was this helpful?