[Vtigercrm-developers] marketplace

[cryptic]

If a user adds their card details to the Marketplace their security code
(also known as CAV2/CVC2/CVV2/CID), card number and expiry date is retained
by vTiger. 

I was under the impression that sensitive authentication data such as the
security code must not be stored after authorization (even if encrypted).

See here for further information.

https://www.pcisecuritystandards.org/pdfs/pci_fs_data_storage.pdf








--
View this message in context: http://vtiger-crm.2324883.n4.nabble.com/Vtigercrm-developers-marketplace-tp17384p17404.html
Sent from the vtigercrm-developers mailing list archive at Nabble.com.