Skip to content
ZenoCloud Call

Storing Credit Card Information On Magento Stores

(at any level: CE, PE, EE) has not been PA DSS certified. Remember, PA DSS applies to software only, and not the infrastructure. Storing cardholder data in a.

First written in 2023. Things may have changed since.

(at any level: CE, PE, EE) has not been PA-DSS certified. Remember, PA-DSS applies to software only, and not the infrastructure. Storing cardholder data in a non-PA-DSS compliant application like Magento will invalidate PCI compliance.

If you do want to store credit card data for any time frame, even if for only a few minutes, you must use either Payment Bridge or a 3rd party plugin/service which is PA-DSS compliant and stores the cardholder information on their servers for later retrieval. In addition to this, the entire flow of cardholder data must be secured. This means all debugging must be off and the connections carrying cardholder information must use some form of SSL/TLS.

Next step

Run Magento on infrastructure built for it.

See Magento hosting

Related services

Browse all field notes
Quote request

What should we quote?

Describe the configuration or problem, location and timing.