That's exactly what I want to know. I definitely do not want to deal with PCI compliance. Sadly Authorize.net doesn't support banks in Canada.
That being said, it's less likely for someone to sniff the info as it passes through your server's RAM than if it was stored on disk.