Comment by grandalf

This is about three years overdue, but at least it's here.

How close does it come to making PCI-DSS Level 1 attainable on Heroku? What about HIPAA?