This option is suited for businesses that just want to add a basic checkout form to their website where customers can enter payment information, without having to take responsibility for payment data security. These days, most payment companies can handle data security for you by hosting the sensitive data themselves, which means the payment gateway takes responsibility for the credit card information from the moment the customer types it into the form until the sale is complete, at which point the data is completely purged. So, if your business doesn’t need direct access to raw customer payment information, and you just need to add a simple payment form to your website, the following options might work for you.

• Embedded Checkout: With North's Embedded Checkout, hosted payments are embedded on the merchant’s site using a prebuilt form, individual secure payment fields, or a highly customizable Direct Post. The payment provider handles the sensitive data, and the merchant's branding can be easily set using the Embedded Checkout Designer. The Fields integration mounts hosted inputs in the business's existing checkout layout while keeping card data out of their environment. If a business does not want to redirect customers to the payment provider’s URL, Embedded Checkout keeps customers on the business’s website throughout checkout while supporting major cards and digital wallets, as well as tokenized responses for follow-up operations.
• Hosted payment page: With this low-code option, a checkout button is added to the business’s website, which loads the payment form on a new page that’s entirely hosted by the payment company. The business typically builds their own HTML page that can be customized to some degree, then they provide the file to the payment provider who hosts the page on their own servers.

  Hosted payment pages typically require that the business’s website redirects to the payment company’s domain, so the URL may change while the customer is viewing the payment form. This can provide businesses with more peace of mind, since the redirect URL is a guarantee that customer payment information is going directly to the payment company, and not coming into the business’s website at all, as with EPX Hosted Checkout.

With these payment products, customers typically make their purchases via the hosted solution, then merchants can perform refunds or voids as needed from the payment company’s merchant dashboard. Instead of writing code to process refunds, you can generally just sign into the payment provider’s portal and refund a transaction with the click of a button.

What’s more, developers can quickly and easily build a shopping cart that connects to the hosted payment solution, enabling customers to add multiple items before checking out. Or if your business makes sales for one item at a time (such as doctor’s offices, utility services, etc.), all you need to do is make a few adjustments to your website to integrate the checkout form and you’ll be ready to start taking payments.

For businesses that need more advanced functionality than just making sales, but don’t need access to customer payment data, and don’t want the responsibility of managing payment data security, there’s an easy solution: the options mentioned in the previous step (a hosted payment page or Embedded Checkout) can be used to make the initial sale, then they can return a secure token that can be used for subsequent, more advanced payment functionality.

In short, you can use a hosted checkout form to make the initial sale, get the secure token in response, and pass the token to a more advanced API to do things like tip adjustments, incremental authorizations, close batches, and lookup specific details on your sales. Since this integration method still keeps all sensitive payment data out of your business’s systems, you can unlock advanced functionality without the risks and responsibility of handling payment data security yourself. One example of how this works in the real world is EPX’s Hosted Checkout, which handles the initial intake of customer credit card information, and returns a secure, non-sensitive token which can be passed to EPX’s Custom Pay API to access additional features.