Security concerns

[franklin]

Hi C&P
We've got our donation form built in a VF page. Working fine but want to make sure I am covering any security concerns. I know my VF page is https. Do I need to take any extra measures in addition to this? Is the information I am submitting being encoded sufficiently?

[CnP.Support]

Franklin,

Salesforce is PCI Level 1 certified. The only thing you should NOT do is not to save the credit card number & the card verification code (CV2). You may save the last 4 digits of the card but never save the entire number.

Let us know when the form is complete so we can review it.