We use Stripe as our Payment Gateway. They are PCI Level 1 Compliant. This is the most stringent level of certification available in the payments industry. All card numbers are also encrypted at rest with AES-256. Find out more here. https://stripe.com/docs/security