By default, Oracle ATG Web Commerce does not apply any encryption to credit card information.
For more information on encrypting credit card information, see the Extensions to the credit-card Item Descriptor section of the Commerce Reference Store Overview.
