I found this topic: http://www.gravityhelp.com/forums/topic/authorizenet-provider-that-provides-pci-compliance, but I am still a bit confused. From that discussion it looks like you just need authorize.net and ssl, but when I started my card processing my merchant account required PCI compliance or I got charged extra $20/ month. So how come we wouldnt need it with this method? Or is it up to your merchant account?