title: PCI DSS Mobile Application Payment and Credit Card Data
body: <p>I need to implement a solution that allows a Mobile APP make a payment against a payment gateway service.</p>
  
  <p>The data I send are the card details and payment data itself.</p>
  
  <p>It is impractical to enter card details each time you want to make a payment, so...so i has been analyzed the following alternatives :</p>
  
  <ol>
  <li><p>Save the data card into your smartphone. Discarded by security.</p></li>
  <li><p>Use a third party to store card data, such as PayPal Vault. Discarded by assign the data to a third party.</p></li>
  <li><p>Save the card data on a own "central server" and using a token strategy. This has the disadvantage that this infrastructure should fullfill[PCI-DSS regulations][1]</p></li>
  <li><p>Save <strong>some</strong> data card on a smartphone and the <strong>rest</strong> in a central service (infraestructure), for example half of the PAN in the mobile, an the other half on the smartphone.</p></li>
  </ol>
  
  <p><strong>According to the fourth alternative :</strong></p>
  
  <p>The question is, if just ONLY <strong>part of the data card is stored,</strong>  should also this central service fulfill  with PCI-DSS standard ??</p>
  
  <p>Thank you</p>