I have my own online store. For all its existence, I realized an important thing, that much should be trusted to professionals, rather than try to figure it out yourself, and then redo everything. I had problems with the compliance of PCI payment systems that came to our base. The problem was solved when I turned the job over to pci dss compliance audit and they did their best to protect cardholders.