AbleCommerce Shopping Cart Software

Ok. Just curious then if this is the same interpretation that any other AC users have (for folks needing SAQ C compliance). Note, we have disabled credit card storage in the AC admin. It seems that some online references to cardholder data include billing address, though it is not explicitly stated ...

It is my understanding that to achieve PCI Compliance of type C, no credit card information can be stored. From my research, this looks to include billing address.

Assuming this is true, is there an easy way to turn off billing address capture?

A couple other questions 1. If an encryption key is set, can the DB ever be reset to no longer use an encryption key? The use case would be if cc numbers are initially stored but business requirements change later and the encryption is no longer required. 2. The encryption key instructions are a lit...

A question about the scope of data encryption... If an encryption key is configured but I am NOT storing any credit data, is there any other data that is encrypted? If not, then I assume it is fine not to set an encryption key and this should not impact PCI compliance (other requirements aside). Tha...