Wednesday, 24 October 2007

Moneyspyder, Evolution and PCI DSS compliance






Matthew Tyler, PCI Practice Manager with Evolution Group:





Jatinder Singh said...

For one of the application(who is also on Engine Yard), we are trying to implement subscription based billing module. we decided that for flexibility it would be best to have our own subscription syste instead of using recurring services of other payment gateways.

Critical thing to take care of, is storage of credit card info.
You have mentioned Evolution, so is that a 3rd party which stores credit card info and have an API for you to access that info or do they help achieve PCI DSS standard by implementing required standards on EY servers?

The alternative we are considering is to use Trust Commerce Citadel service to store cc# info on their servers and then have our own subscription system. any thoughts?

pci compliance said...
