title: PCI Compliance. Pass credit card information to a 3rd party API
body: <p>I have an application that requests Credit Card information to do a payment to a third party company.</p>
  
  <p>My application captures the CC, CVV, Expiration Date, etc. and then passes that information to their API that charges the customer.</p>
  
  <p>I've been reading about PCI Compliance but based on the following image, I am not quite sure what level of compliance I would need to meet.</p>
  
  <p><a href="https://i.stack.imgur.com/Z97sV.jpg" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Z97sV.jpg" alt="enter image description here"></a></p>
  
  <p>Lastly, I would like to figure out what would be the best options for me in case I have a new purchase from the same client. Since I am not charging the customer but the third party does, how would be the best way to store the payment information so user doesn't need to enter his information every single time they want to use my service? What would be the implications of storing payment information on my servers from a PCI compliance point of view? Is there a way where I don't need to store the payment information for the user but I can pass their information (if they are a returning customer) to 3rd party API and still being PCI Compliance?</p>