News for hackers. Stuff that matters.

A comment on Stripe migrates Stripe Subscriptions users to more expensive Stripe Billing. Parent comment

Re:Stripe migrates Stripe Subscriptions users to more expens... by __float on Thursday November 12, 2020 @06:01PM (#25076448)
You don't have to use "hosted fields", but it does mean you have significantly increased requirements regarding PCI compliance (SAQ D vs the much simpler SAQ A, for example).
[ Parent | on HN ]
Re:Stripe migrates Stripe Subscriptions users to more expens... by Alupis on Thursday November 12, 2020 @07:13PM (#25077123)
Not necessarily true. It depends how your site is setup.

Users of eCommerce platforms generally will be SAQ-A since they are not the ones controlling the system which handles CHD. This covers platforms like Shopify, BigCommerce, 3dCart, Volusion, etc, where the platform itself must be PCI compliant on their own, separate from whatever PCI level you are compliant with.

If you self-host, such as Magento, XenCart or some custom implementation - then yes you will be SAQ-D.

[ Parent | on HN ]