Well, here is my big question: WHY ARE YOU STORING CARD DATA AT ALL? (sorry for the caps). You are a pass-through entity, merchant terminals do not store card data. They keep the authorization number from upstream provider to allow void/refunds but there is no need for them to store the number.
With respect to anti-tamper mechanism, are you FIPS-140-2 certified or plan to be?
With respect to anti-tamper mechanism, are you FIPS-140-2 certified or plan to be?