We are going to develop an application for payment gateway which is already PCI DSS compliant,
This application will be handling the payment through the API.
My questions is is the application needs to be PA-DSS, P2PE, or PCI-DSS ?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
If you handle credit cards you definitely need to comply with PCi DSS, If you are a kind of vendor and that you will make and sell payment applications so you need to meet PA DSS.
According to this link:
The PCI DSS is a standard that ALL organizations that store, process and/or transmit credit card data must be compliant with.
You will find almost all you need to know about the paymement gateway integration in mobile apps in the following links:
Hope it helped !