I'm wondering if anyone has any thoughts on a specific question I have. I read a lot about systems that 'store, process, submit' CC data requiring compliance.
If I host a form on my website which takes CC details and posts them to a CC provider, are there PCI implications on my system (even though the CC details do not reach my server?).
The data itself is not stored on my system. It's transmitted between the customer's browser and provider, my system does not participate. My system only sends the form to the customers browser and provides the posting code.
I'd be interested to hear any thoughts or experiences on this if you have any.
Thanks in advance.