3 ms·
Would using this service affect one's PCI DSS compliance?
by estel 14y ago
Would using this service affect one's PCI DSS compliance?
- cperciva 14y agoNot based on my understanding of PCI DSS.
- jellicle 14y agoMerchants are either required to be PCI DSS compliant themselves or outsource their card-handling only to third-party entities who are PCI DSS compliant themselves. So, one of two things is true: -- Paymentiframe/tarsnap is a PCI DSS compliant third party -- the merchant is intentionally violating the PCI DSS rules by sending credit card data to you So, which is it?
- cperciva 14y agoNobody is sending credit card data to me. I'm serving up a form with javascript which sends the credit card data directly to Stripe.