I'm developing the entire backend using for an Over-the-phone Virtual Assistant service. Their clients are busy professionals who delegate their online purchasing and booking to this service, which employs essentially call centre agents to handle their request.
E.g. Client requests service to buy a book, Call Centre Agent answers and goes to BookDepository, AbeBooks, Amazon, literally any company with a website, and buys the book for them.
What solution can we use to record the Client's credit card details (except CVV) and then allow the Agents to retrieving all of it and then manually input it into another service's website? I've looked into PCI-DSS compliance and it is way too onerous to store and retrieve it. Most services like Stripe or Authorize.net allow the company to recurrently bill, but doesn't allow retrieval of the card details (for obvious reasons).
Or is it just too hard and Agents should request the credit card details at every purchase? But I feel that is even more problematic because the Client could be overheard, obviously not convenient, Agent might be tempted to write it down somewhere.