I manage an ecomm site and am being told by my vendor/developer that they cannot display a review/confirmation page without being PCI compliant. The way my checkout is today, when the order is submitted, the customer then sees their order and truncated card, but the order has already been placed. There is no "Review & Confirm" page. Please advise how they can best fulfill these requirements. Thank you.
