Yes, I'm familiar with that. My gut says it's not a good idea, if if everything remains in a single get/post, I guess that information is not in danger is it?
m
michoel
03/08/2021, 11:08 PM
My (rudimentary) understanding is if credit card details are posted directly from client side to NetSuite, and your suitelet doesn't log them it's considered PCI/DSS compliant.
b
battk
03/08/2021, 11:09 PM
All SuiteScript solutions upgrade your responsibilities as outlined in PCI SSC Cloud Computing Guidelines from the standard SasS to PasS
e
ExtendApps Inc.
03/09/2021, 12:04 AM
Great feedback, thanks. Not sure I'll read that 83-pager though. I'll pass that along