We’re currently working on integrating with Authorize.net’s C# SDK, this is new territory for my company and I’m looking for some guidance/clarity on PCI compliance.
Our system is secured with ssl and we don’t store CC# or any other sensitive information on our server at all. I’m wondering from a legal stand point what we’re required to do?
I found this old thread that was helpful, but seems to be some contradicting opinions.
https://community.developer.authorize.net/t5/Integration-and-Testing/Question-on-PCI-Compliance/td-p...
