A way to verify this informations is by controling that the web application does or not save credit card information in the database. An automated way to do this is by scanning/searching the source code o fthe application for key words such as "credit card number", "credit card account". 