I'm new to PCI DSS. I'm coding a custom WordPress plugin for a client of ours which shows a form on their websites. This form will take the customers name, email, quote number, amount, and card details. When they submit the form, a script will send that info to the NetPay API, which will process the transaction and return a status code.
Can someone advise on what PCI stuff we as a business, and the client should be aware of?
I've been direct to the NetPay site, the PCI site, various other provider sites but none of them answered my question really. From what I can see as they're a low transaction (qty) business, they'd need tier 4, but seeing as we're using the API, not a hosted form or anything to do it, it might be different. Please note we're not storing ANY card details, and we will have SSL. Edit: We're also hosting the site through OVH's network, however due to it being API based I imagine the server will need to be in a PCI DSS compliant data centre too...
Thanks in advance folks, Ash