I agree. A startup really doesn't have to build their own credit card processing solution. WRT PCI DSS it's not very hard to comply. Some 7 years ago in a comp

I agree. A startup really doesn't have to build their own credit card processing solution. WRT PCI DSS it's not very hard to comply. Some 7 years ago in a company that persisted everything about customers we changed the system for compliance within two weeks.