3 ms·
You cannot be PCI DSS compliant on Heroku unless you only use paypal express or google checkout for your payment backend. Be mindful of that before you commit t
by xal 17y ago
You cannot be PCI DSS compliant on Heroku unless you only use paypal express or google checkout for your payment backend. Be mindful of that before you commit to something like spree. I recommend Shopify instead :D
- grahamr 17y agoIs this accurate that paypal express and google checkout are the only legitimate ways to accept payments while deployed on Heroku?
- qeorge 17y agoThis doesn't sound right to me. Do you perhaps mean PCI Level 1 compliance (which requires on site data center audits and thus cannot be provided by any cloud host)? For instance, what about Heroku/EC2 prohibits me from using Authorize.net as my payment processor, provided I never store card data?