PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum > PA-DSS - Payment Application Data Security Standards > [PA_DSS] 9. Cardholder data must never be stored on a server connected to the Internet

1. [PA_DSS] 9.1 The payment application must be developed such that the database server and web server are not required to be on the same server, nor is the database server required to be in the DMZ with the web server

vBulletin® v3.7.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.