chiraglathiya

[lost prawn]

That email is about handling raw card numbers on your server, which puts you under a much higher PCI compliance requirement

If you read through our docs, we have many flows that tokenize card details client-side such that your integration cannot not see the sensitive card info that heightens that requirement

If you do have a reason that you need to work with the raw card details on your server, you can talk to our support team about your usecase https://support.stripe.com/?contact=true

[wide plover]

Does that means, I should not provide the card details from our custom designs & instead should use the SDK version?

Will that avoid this risk?

I mean client side, custom form for getting the card details

[lost prawn]

You would have to use either a Stripe-hosted or use Stripe Elements to collect the card info

This doc demonstrates a few ways to do it https://stripe.com/docs/payments/accept-a-payment

[wide plover]

thank you