Take the 2-minute tour ×  If I had to store credit card details
temporarily to shove it to the processor using an asychronous
worker, I know that that information must be encrypted.  To get
it to the worker, however, it must be stored at least in RAM.
How is it possible to do this but remain PCI compliant? This
states:  3.2.2 Do not store the card verification code or value
(three-digit or four-digit number printed on the front or back
of a payment card) used to verify card-not-present transactions.
Or is it impossible to be PCI compliant and use asynchronous
workers?  share|improve this question  1 Answer 1  up vote 5
down vote accepted  RAM is volatile and is not considered
storage for PCI-DSS purposes - so long as the device that
contains the RAM is otherwise PCI-DSS compliant.  In a similar
fashion, temporary storage of the CVC/CVV on disc is not
considered "storage" if the storage is highly volatile. For
example, the operating system's swap space.  share|improve this
answer Can you point me to any sourc