We're building an application (App-A) that will allow a user to enter credit card information. This application will live on a non PCI compliant zone.
We have another application (App-B) that also does credit card processing and this application is in a 100% PCI compliant zone.
If we want to leverage the functionalities of App-B, we'll need to embed it in App-A.
What I want to know is - are we still considered PCI compliant if App-A sends data to App-B via HTML 5 postMessage API.