Not completely au fait with PCI compliance, however we have our server checked each month by our host to check it is PCI compliant, because we have to keep it PCI Compliant for a specific customer/service that we have running on it.
We have another service on the same server/system that creates images containing customer data (name/address)
We want those images to be accessible in another system's template... the third party system is secure (SSL cert). How do we make the images available without breaking PCI compliance ? Eg. We want to allow the other system to do something like this : http://oururl.com?user=1&password=hashedpasshere&labelId=552
If we did that would we be breaching PCI compliance ? Any alternative solutions or thoughts are extremely welcome...
Clarification It's actually the same service that has different components, sorry for the miss-explanation.