How to implement a proper credit card processing solution for your business

mehdi-khalili.com

For small businesses the only way to properly set up CC processing is to leave everything to an outside company, the CC data may not be entered at all on your site so you don't end up with having to comply with PCI DSS, the audits and the associated costs.

I agree. A startup really doesn't have to build their own credit card processing solution.

WRT PCI DSS it's not very hard to comply. Some 7 years ago in a company that persisted everything about customers we changed the system for compliance within two weeks.

Reply on news.ycombinator.com