How do you gain PCI compliance without certifying your server for Craft, with or without Commerce?
The takeaway is to use api packages provided by payment providers such as Stripe and Authorize.net. The Craft Charge plugin can very much simplify and smooth doing so with Stripe.

Here's a link to a Git Gist of the conversation, as Slack erases content within a week:

https://goo.gl/bYIFLV

As well, though I don't guarantee it will stay up, is an experiment with Storify to show the same thing. I'm not sure which version reads better -- maybe Storify on a mobile phone, one reason for trying it.

https://goo.gl/5hEcLS