Timeline for Storing CVC / CVV / CVV2 until payment is processed
Current License: CC BY-SA 3.0
3 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Feb 18, 2017 at 9:12 | comment | added | dave_thompson_085 | You can store PAN and other 'Cardholder Data' either (1) strongly encrypted (2) one-way hashed OR (3) masked. Or (4) you can freely store and use a nonsensitive token which represents the PAN stored by some other compliant system such as the processor. But you can't store 'Sensitive Auth Data' (which CVV is) at all after authorization. | |
Jul 3, 2014 at 12:13 | comment | added | leo0 | Yeah - I was going to store the credit card number, name and expiration date encrypted. Guess I need to find another way. | |
Jul 2, 2014 at 20:19 | history | answered | DKNUCKLES | CC BY-SA 3.0 |