Keeping credit card information safe with Parse or Stripe

Question

I am working on a app that I need to store credit card information. Would it be safe to use the Parse ACL like this?

PFObject *privateNote = [PFObject objectWithClassName:@"_User"];
privateNote[@"creditCard"] = @1234;
privateNote.ACL = [PFACL ACLWithUser:[PFUser currentUser]];
[privateNote saveInBackground];

Or should I use stripe to keep the information.

You should use Stripe, storing credit card info yourself would require a much more extensive PCI complaint setup. — Matthew Arkin, Jul 24 '16 at 20:29

score 0 · Accepted Answer · answered Jul 25 '16 at 09:56

Handling raw card information (i.e. card numbers) yourself would require you to be PCI certified, which is a long and costly process and not a viable option for most entities.

Stripe and other modern payment processors make it easy to be PCI compliant by providing means to send the payment information directly from the customer to the payment processor, without the merchant (i.e. you) having direct access to the PCI-sensitive information. You should definitely let Stripe (or another payment processor) handle the card information for you.

(Disclaimer: I work for Stripe.)

Keeping credit card information safe with Parse or Stripe

1 Answers1