From the stripe website: "a payment field that originates directly from our PCI DSS–validated servers. With safer card acceptance methods like these, we’ll populate the PCI form (SAQ) in the Stripe Dashboard, making PCI validation as easy as clicking a button."
Since the credit card payment data never touches my server, why is PCI compliance a part of the conversation? With Fastpring I don't deal with PCI because credit card payment is done on their server and it sounds like that is equally true with Stripe Elements.
So what am I missing here?
Since the credit card payment data never touches my server, why is PCI compliance a part of the conversation? With Fastpring I don't deal with PCI because credit card payment is done on their server and it sounds like that is equally true with Stripe Elements. So what am I missing here?