New answers tagged compliance
Storage of sensitive authentication data is explicitly not to be stored after authorization. Pre-authorization data can be stored and is outside the realm of the PCI DSS. Individual payment card brands determine the specifics of whether it can be stored, for how long, and what must be done in the process. The PCI SSC has made it clear that this data should ...
Top 50 recent answers are included