Sagepay Repeats and PCI DSS compliant

[allmyhoney]

Hi all, I hope this question is not been flogged to death at this stage but here goes. I am using the sagepay repeats module for my subscription business to good effect. Nice integration and except for the initial transaction the full credit card details are not stored on my database but rather passed to sagepay for repeat payments. However I have come to realize that because the very first initial transaction by the client is to input the details on my site and these are passed to sagepay, I fall under the direct integration method with my bank and need to be pci and dss compliant. Of course I have no issues with this and want to become compliant but can anyone recommend a service provider to do this for me and recommend and advice? All the merchant bank seem to do is provide me with an SAQ of over 200 questions that to be honest I do not understand.

 

I know the repeats payment lessons my dss and pci compliance compared with full integration but I still need guidance here. Do trustwave actually help you - or is it a service to help yourself understand more. Do McAfee do this in terms of DSS - I see alot about the PCI compliance but not much about DSS and these are the questions I do not understand. I completely understand the PCI questions and have alot of this in place now - but the DSS is a real struggle.

 

Anyone any advice here to help a struggling soul!! My goal is to learn more and get to the standards of course but along the way one needs to ask for help. Sagepay have just said use trustwave but they do not cover the DSS much.

 

I am Level 4 PCI so this is my level right now but I still need the DSS help. By the way I would use 2checkout but they charge 5.5% and they charge you twice on currency conversion if you charge your clients in euros so I worked out the currency conversion at around 10% and then the 5,5% and then the one time 45cent charge so its hard to justify all that unless you are in the states and im not. Also paypal is fine but in Ireland there is no real good integration except for the basic one as paypal pro does not exist here and also whmcs does not have a realex gateway so this is a shame - so im left with sagepay. The VSP form is no good for me as I have a subscription business so my options are limited really.

 

As I say any tips or advice would be amazing right now. Thanks for your time everyone.