this works for everything but american express ... in any case my impression was that PCI DSS allows encrypted storage untill it is processed, once processed you must purge it asap.