PCI Scope Reduction Checklist

Choose the checkout

• Confirm no raw card number ever reaches your serversIf card data passes through your systems, you must secure and prove every one of them.
• Use a hosted checkout if you do not need a custom lookRedirecting to the processor's page is the least effort and the least scope.
• Use processor-served embedded fields, such as Stripe Elements, for custom designThe digits go straight to the processor inside your design, at the same minimal scope.
• Rule out a custom card form that posts the number to your backendA little styling freedom costs you the entire PCI burden.