I'm currently implementing our PCI compliance (i work in Germany so it might be a little different here). We used to temporarily save the credit credit data unt

I'm currently implementing our PCI compliance (i work in Germany so it might be a little different here). We used to temporarily save the credit credit data until we got an ok from the payment provider and afterwards mask all data. Now everything is off site: we only hand over the amount and wait until we get the okay.