I am working with a payment gateway, which offers me a method to tokenize credit cards, should I send the cc data from the frontend or should I send the (encrypted) data to my backend and then to the payment gateway? All of this without being PCI complier.
1
There are 1 best solutions below
Related Questions in PCI-COMPLIANCE
- Can I send encrypted Credit Card data to my non-PCI server for sending it to a PCI Credit Card Service? WITHOUT STORING THE DATA ON MY SERVER
- GKE & PCI DSS ASV Scans
- Credit card validation with Auth.net meeting PCI compliance
- is it possible to create a payment profile and a customer profile, using api, but in compliance with the pci compliance regulations?
- CVE-2021-38628 in nodeJs
- has anyone undergone certification of PCI-DSS using general purpose HSM (and not payshield)?
- Is it PCI compliant to create PaymentIntent directly from my Flutter app?
- PCI DSS Compliance when extracting data for analysis
- Masking Card Data Using log4j2
- Objective of PCI DSS 3.4 is only for physical theft of disk?
- Braintree how to use stored credit card for payments
- Displaying Credit Cards on User Profile
- GCP compliance manager - are there API to download reports?
- Tenable Nessus to approve PCI DSS: Microsoft ASP.NET MS-DOS Device Name DoS (PCI-DSS check)
- How do I perform a security scan on an Angular 7 app?
Related Questions in PCI-DSS
- Can I send encrypted Credit Card data to my non-PCI server for sending it to a PCI Credit Card Service? WITHOUT STORING THE DATA ON MY SERVER
- GKE & PCI DSS ASV Scans
- Stripe - Securely handling payments on the server
- curl vulnerabilities reported against a container image that runs a dotnetcore process
- How to store payment card information in case of payment processor migration?
- Removing IIS server header from WebDeploy on port 8172
- PCI DSS Compliance when extracting data for analysis
- Objective of PCI DSS 3.4 is only for physical theft of disk?
- AWS Amplify PCI DSS Certificate
- Using AWS EC2 makes me PCI DSS Compliant
- Certifications needed for FinTech companies
- Internal Vulnerability Scan and Pen testing on Elastic Beanstalk for PCI DSS
- When tokenizing credit card information, does it make sense tokenize every credit card attribute in order to be PCI compliant?
- Should I use separate databases for HIPAA and PCI-DSS compliant data?
- PCI Compliance SAQ A-EP with direct post instead of iframe
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Roman, If your processor has a way to send the data from the front end, this will almost always be the best choice so that you do not have to worry about possibly sending raw card information through your backend. Encryption can be tricky. If you have a public key, you are going to have to mess with that in your JavaScript before posting back to your server. If you post the raw card information back to your server, you are automatically in higher PCI scope. We integrate with a company called USIO and they have the client side tools either with a Iframe popup or embedding the fields in your page to get that sensitive information. It’s pretty easy to use and it keeps the PCI scope down for us.