E-commerce security and PCI DSSSecure checkout, trusted email, protected customers.
Payment security, email authentication and account protection for online and omnichannel retailers.
What's at stake.
- 01
Account takeover and fraud
Credential stuffing and payment fraud hit revenue and customer trust.
- 02
Email reaching the inbox
Since February 2024 Gmail and Yahoo require authentication and easy unsubscribe from bulk senders.
- 03
Customer data
Order, address and contact data is personal data under the DPDP Act.
Rules and standards that usually apply.
Which ones apply depends on your licence, customers and data. Treat this as a starting list.
| Rule or standard | Who it applies to | What it asks for |
|---|---|---|
| PCI DSS v4.0.1 | Applies to · Anyone storing, processing or transmitting card data | Asks for · Security requirements for the cardholder data environment |
| Consumer Protection (E-Commerce) Rules, 2020 | Applies to · E-commerce entities offering goods or services to consumers in India | Asks for · Duties on disclosure, grievance handling and fair practices |
| DPDP Act, 2023 | Applies to · Organisations processing digital personal data in India | Asks for · Consent or a specified legitimate use, clear notices, reasonable security safeguards and breach notification (main duties from 13 May 2027) |
| Gmail and Yahoo bulk-sender requirements (since February 2024) | Applies to · Bulk senders to Gmail and Yahoo addresses | Asks for · SPF, DKIM and DMARC, one-click unsubscribe, spam complaint rate below 0.3% |
| Microsoft high-volume sender requirements (2025) | Applies to · High-volume senders to Outlook.com consumer addresses | Asks for · Similar authentication requirements for bulk email |
How we help.
- Service
Email Security and Deliverability
SPF, DKIM, DMARC and unsubscribe set-up so campaigns reach the inbox.
Learn moreExplore Email Security and Deliverability - Standard
PCI DSS v4.0.1
Reduce card data scope and prepare for assessment.
Learn moreRead about PCI DSS v4.0.1 - Service
Cybersecurity and VAPT
Test storefront, checkout, APIs and admin panels.
Learn moreExplore Cybersecurity and VAPT - Standard
DPDP Act, 2023
Notices, consent and breach steps for customer data.
Learn moreRead about DPDP Act, 2023 - Service
Zoho Implementation
CRM and support desk set-up with sensible access controls.
Learn moreExplore Zoho Implementation
Where to start.
- Step 1
Book the free 30-minute IT & security health check
- Step 2
Check your domain's SPF, DKIM and DMARC status
- Step 3
List every place card data touches your systems
Since February 2024, Gmail and Yahoo require bulk senders to authenticate with SPF, DKIM and DMARC, offer one-click unsubscribe and keep spam complaint rates below 0.3%. Microsoft introduced similar requirements for high-volume senders to Outlook.com consumer addresses in 2025.
Usually yes, with a smaller scope. We help confirm which requirements apply to your integration.
MFA or passkeys for customers and staff, bot and rate-limit controls on login, and monitoring for unusual activity. We test and harden these.
Let's build what's next.
Tell us about your infrastructure, security or automation goals. We reply with questions, then a written plan with scope and next steps.
- Response
- Usually within one business day
- Location
- Worldwide
What happens next
- 01
Reply
- 02
Discovery call
- 03
Proposal
This page is general guidance, not legal advice. Last reviewed October 2026.