{"action":"created","issue":{"url":"https://api.github.com/repos/gratipay/inside.gratipay.com/issues/214","repository_url":"https://api.github.com/repos/gratipay/inside.gratipay.com","labels_url":"https://api.github.com/repos/gratipay/inside.gratipay.com/issues/214/labels{/name}","comments_url":"https://api.github.com/repos/gratipay/inside.gratipay.com/issues/214/comments","events_url":"https://api.github.com/repos/gratipay/inside.gratipay.com/issues/214/events","html_url":"https://github.com/gratipay/inside.gratipay.com/issues/214","id":82586953,"number":214,"title":"implement a PCI self-assessment program","user":{"login":"whit537","id":134455,"avatar_url":"https://avatars.githubusercontent.com/u/134455?v=3","gravatar_id":"","url":"https://api.github.com/users/whit537","html_url":"https://github.com/whit537","followers_url":"https://api.github.com/users/whit537/followers","following_url":"https://api.github.com/users/whit537/following{/other_user}","gists_url":"https://api.github.com/users/whit537/gists{/gist_id}","starred_url":"https://api.github.com/users/whit537/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whit537/subscriptions","organizations_url":"https://api.github.com/users/whit537/orgs","repos_url":"https://api.github.com/users/whit537/repos","events_url":"https://api.github.com/users/whit537/events{/privacy}","received_events_url":"https://api.github.com/users/whit537/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/gratipay/inside.gratipay.com/labels/Hard%20Things","name":"Hard Things","color":"e11d21"},{"url":"https://api.github.com/repos/gratipay/inside.gratipay.com/labels/Security%20Team","name":"Security Team","color":"bfd4f2"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/gratipay/inside.gratipay.com/milestones/4","html_url":"https://github.com/gratipay/inside.gratipay.com/milestones/Payroll","labels_url":"https://api.github.com/repos/gratipay/inside.gratipay.com/milestones/4/labels","id":1152636,"number":4,"title":"Payroll","description":"","creator":{"login":"whit537","id":134455,"avatar_url":"https://avatars.githubusercontent.com/u/134455?v=3","gravatar_id":"","url":"https://api.github.com/users/whit537","html_url":"https://github.com/whit537","followers_url":"https://api.github.com/users/whit537/followers","following_url":"https://api.github.com/users/whit537/following{/other_user}","gists_url":"https://api.github.com/users/whit537/gists{/gist_id}","starred_url":"https://api.github.com/users/whit537/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whit537/subscriptions","organizations_url":"https://api.github.com/users/whit537/orgs","repos_url":"https://api.github.com/users/whit537/repos","events_url":"https://api.github.com/users/whit537/events{/privacy}","received_events_url":"https://api.github.com/users/whit537/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":1,"state":"open","created_at":"2015-06-06T12:31:29Z","updated_at":"2016-03-11T15:57:08Z","due_on":null,"closed_at":null},"comments":30,"created_at":"2015-05-29T21:02:58Z","updated_at":"2016-03-17T04:39:38Z","closed_at":null,"body":"We don't store credit card numbers, but we *are* planning to store bank account information as well as identity verification information. We should implement [a PCI self-assessment program](https://www.pcisecuritystandards.org/security_standards/getting_started.php). We would have to do this in order to receive bank info from Balanced (https://github.com/gratipay/gratipay.com/issues/3379), and we should do this anyway because, while not perfect, it's an industry best practice and a good starting point for us."},"comment":{"url":"https://api.github.com/repos/gratipay/inside.gratipay.com/issues/comments/197698694","html_url":"https://github.com/gratipay/inside.gratipay.com/issues/214#issuecomment-197698694","issue_url":"https://api.github.com/repos/gratipay/inside.gratipay.com/issues/214","id":197698694,"user":{"login":"whit537","id":134455,"avatar_url":"https://avatars.githubusercontent.com/u/134455?v=3","gravatar_id":"","url":"https://api.github.com/users/whit537","html_url":"https://github.com/whit537","followers_url":"https://api.github.com/users/whit537/followers","following_url":"https://api.github.com/users/whit537/following{/other_user}","gists_url":"https://api.github.com/users/whit537/gists{/gist_id}","starred_url":"https://api.github.com/users/whit537/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whit537/subscriptions","organizations_url":"https://api.github.com/users/whit537/orgs","repos_url":"https://api.github.com/users/whit537/repos","events_url":"https://api.github.com/users/whit537/events{/privacy}","received_events_url":"https://api.github.com/users/whit537/received_events","type":"User","site_admin":false},"created_at":"2016-03-17T04:39:38Z","updated_at":"2016-03-17T04:39:38Z","body":"> Out-of-date components should be updated immediately and a patch/update management should be implemented and followed.\r\n\r\n"}}