PCI compliance standards require that all businesses that process credit card information “restrict physical access to cardholder data.” Be sure to keep cardholder data safe by storing completed forms in a secure room or filing cabinet, and restrict access only to employees who require it to fulfill their job duties. Because chargeback windows can vary, we suggest storing all signed authorisation forms for up to three months after you stop charging the card on file. Alternatively, if you use Square, you can store this card information through the Card on File feature (see above).