My company is getting soaked with the renewal fee from a PCI DSS SAQ-D monitoring company - it jumped 400% from last year. One of the thoughts is to qualify for SAQ-A by using "Accept Hosted".
We store our clients credit card in a CIM subscription and provide them a page to update that information (cc, expiration, billing address). Since SAQ-A level would disallow entering that information into our own form - is there something with "Accept Hosted" where that information can be edited with an iframe form?
