We use a custom developed open-source e-commerce software. We are SAQ D and I am trying to figure out which of these requirements applies to our cart if:

  1. We aren't storing credit card information
  2. We transmit credit card information from the user to our server via TLS 1.2 and from our server to the payment gateway via TLS 1.2

I understand there is a boatload of networking, hosting, and process requirments that need to be met, but what specifically is required of a custom shopping cart?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.