4 ms·

Please read stripe's TOS - your application is REQUIRED to be PCI compliant.

• MBCook 14y ago
  I think I know why I got this wrong. There are multiple levels of PCI compliance, right? I think we used services that allowed us to not have to be compliant with data at rest (since we didn't store it), but only the data in transit (or whatever the equivalent term is). This is by no means my area of expertise (as I have accidentally proven).
  • lsh123 14y ago
    Absolutely, there are different levels. However, for all levels you have to do some work to achieve PCI compliance (and overall security of your system). There is no magic in this world :)
    • snowwrestler 14y ago
      True, and the thing about PCI is that many apps probably could benefit from being forced to do this type of work.