Recently I had to implement a website that had to be PCI-DSS compliant.
I am only transferring card details over SSL (encrypted with a random RSA 2048 key generated each time, as well.) The data is then transferred to Stripe. Nothing is stored on my backend in relation to card data.
If I am only handling a few transactions, would a self-assessment suffice?