PCI-DSS is a framework for information security that regulates credit card transactions and can challenge us when the cloud becomes part of the solution. This is the journey of building a financial application inside Microsoft Azure. Together we discover the hassles and challenges of designing and building a PCI-DSS-compliant system from the infrastructure, application, and governance point of view.