2 ms·
I wish PCI compliance required companies that take credit card info for any sort of recurring billing declare if they store your credit card information or if i
by hemancuso 14y ago
I wish PCI compliance required companies that take credit card info for any sort of recurring billing declare if they store your credit card information or if it is stored for them by their gateway/merchant account provider.
There are a thousands of very small SAAS services out there that bill monthly which I assume would take advantage of gateway stored credit card info, then you find out that a comparatively larger more trustworthy player like Linode doesn't.
Similarly it would be nice to also have them declare if they use something like Braintree's transparent redirect such that they never even see the card numbers.