I'm doing work for a customer who is running ZenCart. I work on the ERP software they use, and I'm pulling customer and order data from ZenCart over to the ERP system.

The touchy thing is credit card numbers. I see that the first and last 4 digits are stored in the order table. The users are currently getting an email with the middle digits.

I'm torn; I'm hoping that Zen is secure enough that those middle digits aren't actually stored plaintext in the DB somewhere. But on the other hand, I need them. They want to automate placing the order in the ERP system.

Does Zen have any way for me to access these numbers? Or, is there a way for me to have them direct that email containing those digits to another email address, which I could then monitor automatically and then programmatically extract those digits?

Appreciate any suggestions. I hate CC plaintext, but I also hate "more work" for users. Thanks!