For what it's worth, I've done this with stripe before and never been faced with any challenge or request to verify my compliance. If they do that, it's probably only after a certain volume.
Sent from my BlackBerry 10 smartphone. Original Message From: Bryan Richter Sent: Saturday, September 3, 2016 10:41 To: discuss@lists.snowdrift.coop Reply To: General discussion about Snowdrift.coop Subject: Re: [Snowdrift-discuss] Using Stripe.js will break LibreJS On Fri, Sep 02, 2016 at 11:18:43PM -0700, Aaron Wolf wrote: > Update: I checked with Crowd Supply what they do… > > They say they simply have a form that doesn't use any JS, they > process the form data server-side and send to stripe via Stripe's > API, and they never store any payment data to disk so avoid any > extra compliance burden. Yeah, but, they have to go through the extra bureaucracy of claiming they don't store payment data, and that their logs don't accidentally capture it somehow (as well as making sure that never ever happens). I imagine it's all self-enforced, but we really don't have the bandwidth to deal with any challenges to our claims. We can switch to that method eventually, of course, once we feel we have the bandwidth to deal with potential complications. _______________________________________________ Discuss mailing list Discuss@lists.snowdrift.coop https://lists.snowdrift.coop/mailman/listinfo/discuss
