Free 60-minute 'How to Build a Startup' video series 15 years ago
Good advice, but please keep in mind that even if you're merely shoving the cc data over to authorize.net for storage, you still do need to be PCI compliant if any of it ever touches your servers at all. Everyone is reactive about PCI compliance and cross that bridge when they come to it, but it is something to keep in mind.