3 ms·

I saw that you're collecting credit card numbers on your form... You know that if you are storing them on your servers, you need to follow FDIC regulations, rig

by picardo 11y ago

I saw that you're collecting credit card numbers on your form... You know that if you are storing them on your servers, you need to follow FDIC regulations, right? Otherwise, you are exposing yourself to a huge liability. I'd also be worried about whether you are disposing the credit card numbers you collect after they are done in a timely and secure fashion.... Edit: I meant PCI, not FDIC

chrisrogers 11y ago
PCI is the regulating body. FDIC is just concerned with bank deposit insurance. Looks like they're using Stripe, so I'd suppose they're tokenizing those card numbers before dealing with them.
estsauver 11y ago
We're using Stripe. We never see the credit card numbers. Cheers!