Over the last few months, I have now told my client multiple times that they cannot store credit card information on their non PCI compliant server. It's difficult refusing to do something they have set their mind on (especially when it's just me and 3 of their execs in the meeting). Funnily enough, each time they ask me and I refuse, I think they respect me more for it!