PCI DSS support

PCI DSS support for card payment operations.

Guidance and payment-flow options to help understand, reduce and manage PCI DSS scope around card payment acceptance.

Scope management
Flow options
Guidance
Merchant systemsScope view
StorefrontOrder dataReduced exposure

Protected payment flow

Sensitive card data stays inside the payment layer.

AcquiringRoutingOperations
Scope reduction paths

Your payment flow decides your scope.

How card data moves through checkout determines what your systems touch. Choosing the right flow is the most practical scope decision you make.

Card data in your systems
With hosted checkout
Sensitive data handled in the payment layer
01Hosted

Hosted checkout

A hosted card payment flow can help reduce the amount of sensitive card data handled by your systems.

02Links

Payment links & flow options

Payment-flow options let you choose how card data moves — and how much of it ever touches your environment.

03Own flow

Own card flow, mapped

Running your own payment experience comes with broader responsibilities — we help map and manage them.

04Support

Support around the chosen flow

Guidance and documentation around your setup, so scope management stays part of normal payment operations.

Responsibility map

See where sensitive card data lives.

Map responsibilities around the selected payment flow — and keep payment flow, routing and visibility aligned.

Merchant systemsPaysation layerAcquiring & ops
Sensitive card data handling
3DS & risk context
Routing & acquiring path
Reporting & reconciliation
Operational visibility

Understand where card data touches the operation. The payment layer carries the heaviest handling — your systems keep visibility.

Handled in the layerReduced touchpoints
PCI in the payment flow

The boundary runs through the flow.

Scope follows the path card data takes — from the checkout surface, through the protected payment layer, into acquiring and operations.

Zone 01

Checkout surface

Hosted checkout and payment links keep entry points light for your systems.

Zone 02 · Protected

Protected payment path

Sensitive card data is handled inside the payment layer — alongside 3DS, risk and routing.

Zone 03

Acquiring & operations

Outcomes, reporting and reconciliation reach your team — with the operation fully visible.

Guidance & operations

Scope management as a working process.

We work through your setup with you — from the chosen payment flow to the touchpoints it creates — with documentation and support along the way.

Understand the chosen payment flowIdentify sensitive card data touchpointsAlign checkout, links or own-flow setupKeep visibility in the merchant portal
Scope review
Flow selected
Done
Touchpoints identified
Done
Responsibilities mapped
In progress
Portal visibility
In progress
Guidance & documentation
PCI DSS support

Plan PCI DSS scope around your card payment flow.

Talk to our team about your checkout, the touchpoints it creates and the flow options that can reduce them.

Scope management

Understand, reduce and manage PCI DSS scope.

Flow options

Hosted checkout and payment links can reduce exposure.

Guidance

Support around responsibilities for your chosen flow.

Visibility

The operation stays visible in the merchant portal.