Hacker News Reader

You cannot be PCI DSS compliant on Heroku unless you only use paypal express or google checkout for your payment backend. Be mindful of that before you commit to something like spree. I recommend Shopify instead :D

View on HN

This doesn't sound right to me. Do you perhaps mean PCI Level 1 compliance (which requires on site data center audits and thus cannot be provided by any cloud host)?

For instance, what about Heroku/EC2 prohibits me from using Authorize.net as my payment processor, provided I never store card data?

Is this accurate that paypal express and google checkout are the only legitimate ways to accept payments while deployed on Heroku?

Reply on news.ycombinator.com