The Scenario:
Our agents will collect Credit Card information and will save it. Later on another team of agents will use the information to do the transaction. The transaction is done on a third-party website and our agent manually enter the Credit Card info on that website to create bookings.
The challenge:
As there is a time difference between getting the Credit Card info and the actual transaction, I need to temporarily store the Credit Card info somewhere. But I know that will add a BIG liability on my end. We'll need to be PCI Compliant and all. So I was thinking if there is a service like Strip but that will only store the Credit Card info for me and I can retrieve it back using their token whenever I want. No transaction will be done by that service. This way, the Credit Card info will not be saved in my DB and I'll not have to worry about the security of Credit Cards.
question from:
https://stackoverflow.com/questions/65854119/need-to-store-credit-card-information-but-not-charge-it 与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…