开发者

Can we store ACH details--for US customers--in our own db?

We are building a site where we need to keep ACH info of our users to send them money periodically. Is i开发者_如何学JAVAt fine to just store this info in our db? These are only for US customers and although this is technically financial information, we're assuming it does not fall into PCI DSS obligations.


If it's not credit card information, it's not within the scope of PCI-DSS, e.g. if you don't process CC PAN, your implementation is not within the scope of PCI-DSS. This information is available in the PCI-DSS document.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜