#carlosbilangieri5521973113198
graceful tuskBOT
Hello! We'll be with you shortly. Below are links to other discussions we've had with you in the past week in case you want to review that information. If your question is related to one of these previous discussions, please provide a comprehensive summary of the current state and what you need help with now. We help many users simultaneously, so a summary allows us to resolve your issue as soon as possible.
- carlosbilangieri5521973113198, 2 days ago, 3 messages
sterile arrow
Hi
We have integrated your Software (Space Manager) www.radicalsys.com
with Stripe API v1...
The customers that want's to Sign up with Stripe now, have been requested to fill out a form to enable enabling access to raw card data API
Now the they are requesting a PCI Complience document...
shell walrus
hi! yep, that's expected as we are tightening the ability to pass raw PANs this year(as it's often a vector for fraud).
https://support.stripe.com/questions/enabling-access-to-raw-card-data-apis
just so I understand, are you saying you are the developer of this software you mention?
sterile arrow
Yep...
I am the developer of the integration...
But in this case, only registered companies uses our software...
shell walrus
and it works by users copy and pasting their Stripe API keys into your application?
sterile arrow
The API Keys are encrypted into the software...
shell walrus
sure, but the point is you are not using our Connect product to connect to the user's Stripe account right? and instead the user copies their own account's API keys from their Stripe Dashboard and provides it to your application?
sterile arrow
once the API Key is added to the software it can't be seen anymore..
sterile arrow
sure, but the point is you are _not_ using our Connect product to connect to the...
Yep.. we are a Windows based application
shell walrus
sure, but that's not what I'm asking
cool
and your application sends raw PANs to the Stripe API?
sterile arrow
Yep...
shell walrus
then as I said this is all expected and the users have to provide PCI compliance docs, as far as I know
sterile arrow
Yep, but our software does not store any card infomation...
shell walrus
we have no way to know that your application is being used since it's just the user's API keys and it will look to us like they are sending us raw PANs
sure but it has access to the card information
I suggest writing to https://support.stripe.com/?contact=true overall to get in touch with us
I appreciate that might be hard since you probably don't have a Stripe merchant account directly, but there is a team involved in these PCI changes and you can try to get in touch with them