Hello. I'm still working on a custom point of sale system from scratch using web technologies for Android.
I was looking over the PCI compliance checklist, and I'm wondering what I need to implement in my software in order to stay compliant.
Since all card payments would be handled through Square (my app would switch to and open the Square app), do I need a firewall? Do I still need to track network traffic? Do I need to install some sort of antivirus on the Android device I use for my POS?
Do I need to regularly test security systems and processes (what "systems and processes" will I even have if Square handles all payments)?
If anybody could help me understand what I need to do and don't need to do if I use my own custom software, I'd really appreciate it.
Thank you!
-Rick
