You're lucky. The requirements for companies that don't use card readers are a nightmare. (We can't use machines because we provide a business-to-business service to clients all over the world and do not have physical access to them or their credit cards.)