Storing Account Number / Sort Code?

[eluser]invision[/eluser]
Yes, it's the bank account number and sort code.

We've decided to just make it a printable form that is then faxed/posted to the client. It just seems too risky online.

We'd have been using shared hosting which would have been even riskier.

We would have used SSL for the form, moved the PDF outside the root and only let a CMS access it. But shared hosting would probably leave us without a hope of getting the PCI standard.

Explaining it to the boss was pretty interesting....


Thanks for all your input guys, I may pursue this in the future.