3 ms·
PCI DSS states: PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted. If a system accepts CC numbers from
by andrewf 17y ago
PCI DSS states: PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted.
If a system accepts CC numbers from a form and then passes them to a 3rd party gateway for processing, it's within PCI scope, even if it doesn't store them.
- fuzzmeister 17y agoCertain companies (like Braintree) offer a service where the credit card data is POSTed directly to their server, relieving you of most aspects of PCI compliance.