We are a company developing apps for Payment Service Provider(s) and in one of our apps Card Holders should enter payment Card data (such as PAN, PIN 2, CVV, Expiration Date) to do a CNP (Card Not Present) payment transaction and PAN is stored for ease of data entry in the future use.
The main standards that we are trying to comply with are PA DSS (v3.0) as well as PCI DSS.
I want to know whether there is any other standard that we should comply with. For example, the communication between Apps and Back – End services must be secure. Is there any standard for that? Should we apply PCI P2PE to our apps?