Level 16
My recommendation is to avoid it at all costs. Offload all that security and compliance to a company that specialized in it. If you do need to store some info start reading up on PCI compliance and what you can and can't store and the implications on compliance level and status. https://www.pcisecuritystandards.org/
