Stripe PCI-DSS Level 1
1. Hosted Stripe Checkout & Zero Raw Card Storage
Scope: All 7 self-serve products (ClauseCut, FormBatch, StackROI, ScopePilot, SignalDrop, Monitor, LeadPulse)
Technical Verification: Every purchase redirects via HTTPS 303 to checkout.stripe.com (cs_live_...). OnBits never collects, transmits, or stores raw payment card numbers or CVV codes on its servers.
Buyer Impact: Post-checkout fulfillment is unlocked deterministically by verifying the completed Stripe Checkout Session ID or signed Stripe webhook event.