#sandy.nozaki
twilit saddle
Are you referring to the Stripe IDs for Transfer objects and Balance Transaction objects?
tight hawk
yeah referring to the Stripe transaction and transfer ids
we just want to make sure its not containing any sensitive info
like the fingerprint in the transaction or transfer_ids
we want to have those available on our portal so that our vendors can refer to for tracking from our portal to stripe
twilit saddle
I can't speak to what is and isn't PCI compliant, but those are Stripe-specific IDs, so they should have nothing to do with PCI requirements as far as I know.
tight hawk
but do those stripe-specific ids contain any sensitive info? such as fingerprint?
twilit saddle
no
tight hawk
can i assume that the transaction id contains just the order details?
even if some hacker was to get those stripe-specific ids, they wouldnt be able to obtain any sensitive info right? unless they took those and hacked into stripe?
empty badgeBOT
silver thunder
The id itself doesn't contain any info. They'd need access to your API keys or Stripe's system to get anything with the ID
It's not considered sensitive data
tight hawk
so any stripe-specific ids do not contain any sensitive info.
silver thunder
The id themselves are not sensitive
tight hawk
the API key you are referring to is the private client key right?
tight hawk
the secret key
silver thunder
yes
tight hawk
ok thank you so much