Secure sensitive data (credit card) on RoR

Question

Which are the best practice to store a credit card and billing information from my clients on my RoR application?

Actually I'm working with ruby 1.9.2, Rails 3.2.3 and Im thinking to deploy my app in Heroku.

Any help will be appriciated!

Actually 1.9.2 is the version of Ruby (the language). Ruby On Rails is a framework and the most used versions currently are 3.x (I'm no RoR expert but I think it would be best if you check the right RoR version to get better help) — madth3, Sep 11 '12 at 06:06

score 15 · Accepted Answer · edited May 23 '17 at 12:00

15

Best practice is never store users credit card and billing information in your application. This information will be stored by a payment processor you chose for your application. Payment processor, or payment gateway can be Autorize.net, PayFlow Pro, Stripe and many other. Read this to find out all about payments integration on your site.

edited May 23 '17 at 12:00

Community

1
1

answered Sep 11 '12 at 06:29

Aleksander Lopez

515
4
17

Thanks for your advice, but if its mandatory by my client to store it locally, there's a best practice to encrypt that information? – Jorge Najera T Sep 11 '12 at 22:30
1

To store this information you should follow Payment Card Industry rules. http://www.pcicomplianceguide.org/ – Eugene Dorian Sep 12 '12 at 07:29

Secure sensitive data (credit card) on RoR

1 Answers1