5 ms·
> 7. Complete credit card numbers used on Order(s) Can you fail PCI compliance if you're able and do this? What if you use a third party system such as Stripe
by jwwest 14y ago
> 7. Complete credit card numbers used on Order(s)
Can you fail PCI compliance if you're able and do this? What if you use a third party system such as Stripe where you have no access to the full credit card number?
- jws 14y agoNeither credit card numbers nor IP addresses were included because we don’t retain that information for our own protection as an organization. In general, you can not be compelled to produce something which you do not have. This is why you see legislation proposed with mandatory retention policies for various businesses.
- aaronblohowiak 14y ago>Can you fail PCI compliance if you're able and do this? There are many ways to achieve PCI compliance. Not having the data is simply the easiest.