4 ms·
> (You are much better off using Stripe or Braintree than doing this yourself.) Gonna throw in a recommendation for Spreedly (http://spreedly.com http://spreed
by dangrossman 13y ago
> (You are much better off using Stripe or Braintree than doing this yourself.)
Gonna throw in a recommendation for Spreedly (http://spreedly.com http://spreedly.com) right here. It's a processor-agnostic payment vault, so that you can offload your card storage needs without having to commit to a processor for the life of your business.
Build against Spreedly and if you want to use Stripe today, and some new YC 2014 startup next year, you just change one line of code and you're done. If you store your customers' cards at your processor, you're locked in to that choice to various degrees (from having to request some kind of encrypted hand-over and re-implementing all your billing code, to having to ask every single customer to re-enter their billing info because you chose a processor that won't give you your information when you leave).
- adrr 13y agoWe're looking at spreedly right now. Do know if they use Hardware Security Modules? Working in E-commerce field i've seen some pretty bad "secure implementations" like storing all the credit card data in a separate database encrypted, but they put the private key into the code base.